Static task
static1
Behavioral task
behavioral1
Sample
e0c1668a1a59138ead4b97c701b8dac43edda996e671357506dcf5438c45f167.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e0c1668a1a59138ead4b97c701b8dac43edda996e671357506dcf5438c45f167.exe
Resource
win10v2004-20220812-en
General
-
Target
e0c1668a1a59138ead4b97c701b8dac43edda996e671357506dcf5438c45f167
-
Size
107KB
-
MD5
04646a84e10504a489f602d6ff0603d0
-
SHA1
d4280ff26861ec102ca37480ec257443fc6d71c0
-
SHA256
e0c1668a1a59138ead4b97c701b8dac43edda996e671357506dcf5438c45f167
-
SHA512
5e13f57e482083802216d5c7b845fce14c7385e6e695beb24616d2aa9a94ab31318d1942291cc1ea6a560af3e7cf47d29fa1787b9fe752c4e1548043b697c181
-
SSDEEP
1536:INm5o5/J1iuphOXwuSaejkSZsRARKujE7OSLkVOQjNpjVrs2ryrd1vUQuqQGFNif:sZiupZurwpsRARLE7O9jNHs2quGf9
Malware Config
Signatures
Files
-
e0c1668a1a59138ead4b97c701b8dac43edda996e671357506dcf5438c45f167.exe windows x86
67640f8786cee60cc6dc0ed3018fe7ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstChangeNotificationW
ReleaseSemaphore
BaseInitAppcompatCacheSupport
CompareFileTime
SetLocalTime
CreateMailslotA
GetNextVDMCommand
Process32FirstW
GetUserDefaultLCID
CreateProcessA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 51KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE