Static task
static1
Behavioral task
behavioral1
Sample
e818da4477b69b0f525c162bfcc77009bb572aca8cfeba5efcbf7bc91dd2595b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e818da4477b69b0f525c162bfcc77009bb572aca8cfeba5efcbf7bc91dd2595b.exe
Resource
win10v2004-20220812-en
General
-
Target
e818da4477b69b0f525c162bfcc77009bb572aca8cfeba5efcbf7bc91dd2595b
-
Size
134KB
-
MD5
0f3e2d5a9fc77fd3c8bd65809221bd20
-
SHA1
cf98221cb4d8943d0dd7287d619f9ad0ead6da6a
-
SHA256
e818da4477b69b0f525c162bfcc77009bb572aca8cfeba5efcbf7bc91dd2595b
-
SHA512
e539c269a7b30d0cb29d2355f44e978907cbef65e1b9e4d907a9bdfd62ded9f3723dcc8c1026908b4b3aa88ea5326447c60e4c39225c21f3ec6fc33bc4c02903
-
SSDEEP
3072:bOM+WfM9yRO6RsgPS0aC3hDfnvnw3bZK/vu9lFOIF:zcgPSTClvnw3bQnu9lFn
Malware Config
Signatures
Files
-
e818da4477b69b0f525c162bfcc77009bb572aca8cfeba5efcbf7bc91dd2595b.exe windows x86
3105c6d9a99b9cc940e049af69ac6c3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
MapViewOfFile
CreateDirectoryW
SetPriorityClass
HeapFree
RemoveDirectoryW
GetTickCount
IsValidCodePage
GetStringTypeA
GetModuleHandleA
GetFileAttributesA
TlsGetValue
GetFileAttributesA
GetExitCodeThread
VirtualProtect
FindResourceW
GetLocaleInfoW
LocalLock
FindClose
GetCurrentProcess
SuspendThread
SetLastError
user32
LoadImageW
SetCursor
IsWindow
PeekMessageW
LoadStringW
LoadCursorA
GetWindowTextW
GetWindowLongW
SetFocus
DispatchMessageA
PostMessageW
wsprintfW
IsDialogMessageA
msctf
TF_InitSystem
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE