Static task
static1
Behavioral task
behavioral1
Sample
e18afda9f08d4c5e476570db7b3d9c22b5744b2c51c56edbf301846ac8702ba2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e18afda9f08d4c5e476570db7b3d9c22b5744b2c51c56edbf301846ac8702ba2.exe
Resource
win10v2004-20220901-en
General
-
Target
e18afda9f08d4c5e476570db7b3d9c22b5744b2c51c56edbf301846ac8702ba2
-
Size
94KB
-
MD5
50c103e9351f1730d9b39bd9fc82ccf0
-
SHA1
7b37f39e92af18b9eed689bbf4a9156c97a7341e
-
SHA256
e18afda9f08d4c5e476570db7b3d9c22b5744b2c51c56edbf301846ac8702ba2
-
SHA512
fac0a86bd3a336554255243aa316ad728e98bbc9ba5cd58350cd4d8c5d45de8b06c6188303dea15df28c8159024cca59da73142fb999b31f9dc7b2171590a76f
-
SSDEEP
1536:nJUU2SmSsie1o4fm7wNoeHcXUY/PGPvLPc8YaEJwZK4/83ZoMOALF6SSf:nJUwjsl13u0NoVGPrhZEXtpxLF6H
Malware Config
Signatures
Files
-
e18afda9f08d4c5e476570db7b3d9c22b5744b2c51c56edbf301846ac8702ba2.exe windows x86
0d1278cde07e5cd0a2ecebd3d91c7508
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetTimeZoneInformation
_lread
PrivCopyFileExW
GetConsoleOutputCP
EraseTape
SetPriorityClass
Module32FirstW
SetThreadPriorityBoost
ReadConsoleA
FreeVirtualBuffer
DefineDosDeviceW
SuspendThread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE