Static task
static1
Behavioral task
behavioral1
Sample
e1776d67ff16a426073b5779c0a69a7b4d9a1840b3fd4d640f70995e7c4658c5.exe
Resource
win7-20220812-en
General
-
Target
e1776d67ff16a426073b5779c0a69a7b4d9a1840b3fd4d640f70995e7c4658c5
-
Size
59KB
-
MD5
73f44c4459079f283aa1fd55b4320580
-
SHA1
68f1c73d5a7041cfded3d73fb77ab6de6d25c9a9
-
SHA256
e1776d67ff16a426073b5779c0a69a7b4d9a1840b3fd4d640f70995e7c4658c5
-
SHA512
daf6d330bc35862cc25d77f35c7d79ada9d8455383196bddb19bd5b21c62b8e3ebfe126f1a2b3893b42c908e5879f722e61cd7c0a96b5b0330311e07be14692f
-
SSDEEP
768:+8r76LEYKINJ8AywQyLh0kehtI9JD740oUxsQyUe19zEC+TTPXk2j2zPzyRLaTs:+8RmNLjVyM9JLqUe19l+TrUlz6
Malware Config
Signatures
Files
-
e1776d67ff16a426073b5779c0a69a7b4d9a1840b3fd4d640f70995e7c4658c5.exe windows x86
f555a5b2f894fc45c0d02a728074ce1f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
user32
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
RegisterClassA
CharNextExA
ole32
CoInitialize
CoUninitialize
kernel32
CloseHandle
EnterCriticalSection
FormatMessageA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetTickCount
GetVersionExA
InitializeCriticalSection
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
SetLastError
UnhandledExceptionFilter
VirtualProtect
lstrlenA
DeleteCriticalSection
ws2_32
WSASocketW
WSAEventSelect
ntdll
_wcslwr
memmove
wcscmp
wcscpy
wcslen
wcscat
advapi32
RegOpenKeyExA
RegQueryValueExA
Sections
AUTO Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 47KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ