Static task
static1
Behavioral task
behavioral1
Sample
e6bb2516fdbcce34412d1530601202344a9768966c6b41f4031391b4a4e2b726.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6bb2516fdbcce34412d1530601202344a9768966c6b41f4031391b4a4e2b726.exe
Resource
win10v2004-20220901-en
General
-
Target
e6bb2516fdbcce34412d1530601202344a9768966c6b41f4031391b4a4e2b726
-
Size
290KB
-
MD5
921a42c9a3aa99ac923090c9c2382568
-
SHA1
df93d58d3b7b2ee96de6e38ffec67c7650cc87ca
-
SHA256
e6bb2516fdbcce34412d1530601202344a9768966c6b41f4031391b4a4e2b726
-
SHA512
d2e769fbf8cb415ada1bd260942b9ceea91d075e5949b831ffb89a46c08135bd1bf3dc2829b1e3ba89eb6f1970dc1fa51e9b03582fc786116960dce669f37e32
-
SSDEEP
6144:O31nbxIcfJtjbYHB9U9+jBk4+bip3BHnN7AGezuYUovc+X:sbxIcfHbSsbmpRnJSzMoU+X
Malware Config
Signatures
Files
-
e6bb2516fdbcce34412d1530601202344a9768966c6b41f4031391b4a4e2b726.exe windows x86
7828343e66a96ffbeafe51a71e2e6be8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectPalette
CreateBitmap
GetObjectA
SelectObject
RestoreDC
oleaut32
SysAllocStringLen
RegisterTypeLib
SafeArrayCreate
SysReAllocStringLen
ole32
CoUninitialize
CoDisconnectObject
shell32
DragQueryFileA
version
VerInstallFileA
kernel32
GetCommandLineA
lstrlenA
ExitProcess
LoadLibraryExA
lstrlenW
IsBadReadPtr
GetProcAddress
ExitThread
GetLastError
LoadLibraryA
GetOEMCP
GetCommandLineW
SetErrorMode
GetModuleHandleA
GetModuleHandleW
VirtualAllocEx
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ