Static task
static1
Behavioral task
behavioral1
Sample
e3e1ba431c8bc320c8bba7a51e62c0297513422f138a976b07a18aec1afd0cef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3e1ba431c8bc320c8bba7a51e62c0297513422f138a976b07a18aec1afd0cef.exe
Resource
win10v2004-20220812-en
General
-
Target
e3e1ba431c8bc320c8bba7a51e62c0297513422f138a976b07a18aec1afd0cef
-
Size
63KB
-
MD5
9023584015980c5540d89c3797cbae60
-
SHA1
1a18b187f918b3cf2a358b1fe28a6286bf3a364c
-
SHA256
e3e1ba431c8bc320c8bba7a51e62c0297513422f138a976b07a18aec1afd0cef
-
SHA512
d60d306dfeab83af7c9f6ab06694110b4bf36eb29fe0a2187646d5a7eef4cb357951ebd22b933508d6001ca71cc7133ee8681342ce90f655f13d2e8f82a9d784
-
SSDEEP
1536:T0otgrAxbIE0cyYC7sgIbRDBwVfysdhaDgSCumD0iMugcp:IoujEeYCUGfzkgUO
Malware Config
Signatures
Files
-
e3e1ba431c8bc320c8bba7a51e62c0297513422f138a976b07a18aec1afd0cef.exe windows x86
1c09fcda138ad4609f5d28c8893db297
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalHandle
FormatMessageA
CheckNameLegalDOS8Dot3W
SetEvent
GetConsoleCursorMode
FindAtomW
DebugActiveProcess
FindFirstVolumeMountPointW
SetConsoleDisplayMode
SetThreadUILanguage
SwitchToFiber
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE