Static task
static1
Behavioral task
behavioral1
Sample
e0d78ea29528fad98ae7e9d220674e6ba86b1de0217ebaa768bac44b176884e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0d78ea29528fad98ae7e9d220674e6ba86b1de0217ebaa768bac44b176884e7.exe
Resource
win10v2004-20220812-en
General
-
Target
e0d78ea29528fad98ae7e9d220674e6ba86b1de0217ebaa768bac44b176884e7
-
Size
47KB
-
MD5
a03a9560c99a7e6aff3f8015ae86d03b
-
SHA1
57ab59176abd0867331cf388fe79589c9b9ea84b
-
SHA256
e0d78ea29528fad98ae7e9d220674e6ba86b1de0217ebaa768bac44b176884e7
-
SHA512
01d18c18839a4e6e1c7d6d16bd6c485dd1c184d8a0e14e27666419991bee62d61a5e3d5738caebca826ab1517182f9cd22a410c8dc0fb37c0d592095e1c6964a
-
SSDEEP
768:qHhxHB+qVmjT6ALJybGw2OvU7iOuJDGUQ6E:qHh+dTBJ63M7iOAGn6E
Malware Config
Signatures
Files
-
e0d78ea29528fad98ae7e9d220674e6ba86b1de0217ebaa768bac44b176884e7.exe windows x86
91c912924d4cada59b977843e1db7f61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wtol
wcscat
wcslen
wcsncpy
wcscmp
wcsncat
advapi32
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
kernel32
MapViewOfFile
OpenEventW
GetSystemDirectoryW
LoadLibraryExW
GetModuleFileNameW
CreateProcessW
FreeLibrary
UnmapViewOfFile
DuplicateHandle
OpenMutexW
WaitForSingleObject
GetLastError
ReleaseMutex
CloseHandle
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentProcess
OpenProcess
SetUnhandledExceptionFilter
SetErrorMode
GetModuleHandleA
GetProcAddress
DeleteFileW
SetLastError
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE