Static task
static1
Behavioral task
behavioral1
Sample
0e93437f5010a7822015c2cdb207262cd92234ae4a4ff1bd96bc26335c1fd7ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e93437f5010a7822015c2cdb207262cd92234ae4a4ff1bd96bc26335c1fd7ff.exe
Resource
win10v2004-20220901-en
General
-
Target
0e93437f5010a7822015c2cdb207262cd92234ae4a4ff1bd96bc26335c1fd7ff
-
Size
140KB
-
MD5
5876bcd86a7aa8bc65dd301d60c3723c
-
SHA1
4a31ea7e560d03db147e6498c3d36a56922416de
-
SHA256
0e93437f5010a7822015c2cdb207262cd92234ae4a4ff1bd96bc26335c1fd7ff
-
SHA512
c92aaf601890b4191b052c066a0daa03e283853de1c702ba03d4bf78565d4c126eb8327b15e35616cdfc4306915e39b2d3b64f75cf81900ca3e8bf234fc16898
-
SSDEEP
3072:439Ct26tcrOEDeL4AGTha8WLXliZPyQ7Ebc:eo26gOEDeL4ZhFWLViZqbc
Malware Config
Signatures
Files
-
0e93437f5010a7822015c2cdb207262cd92234ae4a4ff1bd96bc26335c1fd7ff.exe windows x86
ac867ebbde8f9a2b0c551a4871e4d35b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
GetCPInfo
GetOEMCP
SetEnvironmentVariableA
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
HeapSize
LoadLibraryA
CloseHandle
GetCurrentProcess
GetLocalTime
CreateFileA
GetFileSize
SetFilePointer
WriteFile
GetModuleHandleA
GetProcAddress
GetVersionExA
GetLastError
GetModuleFileNameA
GetCurrentThreadId
OutputDebugStringA
SetEvent
OpenEventA
Sleep
GetACP
VirtualFree
HeapCreate
ExitProcess
RtlUnwind
GetCommandLineA
GetCurrentProcessId
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
advapi32
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
DeleteService
CreateServiceA
RegCreateKeyA
RegSetValueExA
RegCloseKey
DeregisterEventSource
RegisterEventSourceA
ReportEventA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE