Static task
static1
Behavioral task
behavioral1
Sample
e18ebd3139a4f38ce59e39f127d95d691482a01f38a39b1b55da8dfe41c50a32.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e18ebd3139a4f38ce59e39f127d95d691482a01f38a39b1b55da8dfe41c50a32.exe
Resource
win10v2004-20220812-en
General
-
Target
e18ebd3139a4f38ce59e39f127d95d691482a01f38a39b1b55da8dfe41c50a32
-
Size
140KB
-
MD5
25a14c837c44728c914cfab2ccf69ad2
-
SHA1
3438c75c989e83f23afe6b19ef7bef0f46a007cf
-
SHA256
e18ebd3139a4f38ce59e39f127d95d691482a01f38a39b1b55da8dfe41c50a32
-
SHA512
a23fc960012503a5464ce4d9a146c99def9b9486b35f5ff1ee1c08b89dd82cb5fde2d3af49a2594ef83c81875911c163511979809c0a41560f53e323928b2ecf
-
SSDEEP
3072:+9Zam3LhU4x6KQdsBhq4ldAVRXVjyK876mlW6:+9VLhPw1qH3l6ZOVlJ
Malware Config
Signatures
Files
-
e18ebd3139a4f38ce59e39f127d95d691482a01f38a39b1b55da8dfe41c50a32.exe windows x86
9409ac41489703e88e1a9c3063a8e9eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBkColor
SetTextJustification
SetColorSpace
GetCurrentObject
GetICMProfileA
kernel32
SwitchToThread
SetConsoleScreenBufferInfoEx
GlobalAlloc
DeleteCriticalSection
FreeResource
DeleteAtom
GetTapeStatus
GetDynamicTimeZoneInformation
GetProcessPriorityBoost
GetCommandLineA
DeactivateActCtx
FindNLSString
GetWindowsDirectoryW
GetNumaNodeProcessorMask
crypt32
CertGetValidUsages
rpcrt4
NdrSimpleTypeMarshall
user32
IsCharLowerA
DrawIcon
GetMenu
GetListBoxInfo
GetLastActivePopup
IsWindowEnabled
oleaut32
VariantTimeToDosDateTime
advapi32
GetEventLogInformation
ole32
CreateStreamOnHGlobal
winmm
auxGetDevCapsW
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 4KB - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ