Static task
static1
Behavioral task
behavioral1
Sample
0e0e7d069951a1b8fe22d08dc032a4ba699319b89b41c5bfcc17fd1b5c40502f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0e0e7d069951a1b8fe22d08dc032a4ba699319b89b41c5bfcc17fd1b5c40502f.exe
Resource
win10v2004-20220812-en
General
-
Target
0e0e7d069951a1b8fe22d08dc032a4ba699319b89b41c5bfcc17fd1b5c40502f
-
Size
798KB
-
MD5
81691d0fddbd2c9ed8f9a9d9af8b2fc0
-
SHA1
70b1d5e9bfa6eef7473bc26427e1ce8c2a2028ab
-
SHA256
0e0e7d069951a1b8fe22d08dc032a4ba699319b89b41c5bfcc17fd1b5c40502f
-
SHA512
06778ad289bd64af3355d2d33003df5f30ebb87fa03b86846536901c8af17a55a8c3b1f4e7966912e2c2aca335f9cecb37c95d46f83244dd8a4178573bc9cc15
-
SSDEEP
24576:k7aPJE+ne3SDAA7QMfN3j8uHfpCUO/bcxfV1fG:k7MJ0SDAWQCwuHfoHKV1
Malware Config
Signatures
Files
-
0e0e7d069951a1b8fe22d08dc032a4ba699319b89b41c5bfcc17fd1b5c40502f.exe windows x86
b2760769522b493ebf5c5509ec0e8500
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenA
SetFilePointer
CreateMutexA
HeapDestroy
ResumeThread
GetModuleHandleA
GetTickCount
CreateDirectoryA
VirtualProtect
SetEvent
CreateFileW
PulseEvent
LeaveCriticalSection
CreateFileW
GlobalFlags
AddAtomA
SuspendThread
IsValidLocale
InterlockedExchange
GetVersionExA
GetFileAttributesW
GetModuleFileNameA
GetLocaleInfoA
OpenEventW
GetCurrentThreadId
user32
LoadCursorA
DispatchMessageA
GetWindowTextA
SetRect
wsprintfA
GetWindowLongA
DestroyMenu
DestroyIcon
GetWindowLongA
SetFocus
MessageBoxA
IsMenu
PeekMessageA
dplayx
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE