?FigureMarkerOutput@@YG_KPAU_PSP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
e2093be1831e277f22d10839b95c290a96651708e8af68e30a55f3baaacc0a96.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e2093be1831e277f22d10839b95c290a96651708e8af68e30a55f3baaacc0a96.exe
Resource
win10v2004-20220812-en
General
-
Target
e2093be1831e277f22d10839b95c290a96651708e8af68e30a55f3baaacc0a96
-
Size
158KB
-
MD5
0abf26349c99509a4d1327d801880f95
-
SHA1
2ecdefe504d7d3e12605f1427e9feec90dc09a8c
-
SHA256
e2093be1831e277f22d10839b95c290a96651708e8af68e30a55f3baaacc0a96
-
SHA512
b9848c601324191086568d7767a020a5afe4b3741fe34d5d39e35b296533f9875a0910c1d4f59453f0cdf75fe948aede99ce5c28927ff92e1caa88365afcce26
-
SSDEEP
3072:vQRLC6bxbjVM76Jh6JK6WOeYdqQcipUxmS5L+csYCyaUX:YdCmxvVWlHdDciiKqCyaU
Malware Config
Signatures
Files
-
e2093be1831e277f22d10839b95c290a96651708e8af68e30a55f3baaacc0a96.exe windows x86
c8648716a105f05779a0f3188475dc78
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SystemParametersInfoA
GetProcessWindowStation
ActivateKeyboardLayout
GetKeyboardType
CharLowerBuffW
shlwapi
PathRelativePathToW
kernel32
GetProcessHeap
Exports
Exports
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.quan Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bin Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.win Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.win2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.win1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ