Static task
static1
Behavioral task
behavioral1
Sample
e95e90bdb7215eafd088e67069b172c472bc0a428ac10990807a09d2c49c6159.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e95e90bdb7215eafd088e67069b172c472bc0a428ac10990807a09d2c49c6159.exe
Resource
win10v2004-20220812-en
General
-
Target
e95e90bdb7215eafd088e67069b172c472bc0a428ac10990807a09d2c49c6159
-
Size
126KB
-
MD5
0bc96d39e46a37bca1fc0c3333014ed8
-
SHA1
120f9b01a90f57cdb8c57b170d88a909153a9bfa
-
SHA256
e95e90bdb7215eafd088e67069b172c472bc0a428ac10990807a09d2c49c6159
-
SHA512
13637b8031dd77d555556630cd3b9d3b6bcd52a4117bd5581bd3353b9660d0928baeaa0f47b8d82f4097bd63513cdac581a039d606a197d39399b4e7600aa29b
-
SSDEEP
3072:buc34zEQND26rj/E9CTMxNodKyfaN+mJ7OoR:yg4zRZjFSocNJR
Malware Config
Signatures
Files
-
e95e90bdb7215eafd088e67069b172c472bc0a428ac10990807a09d2c49c6159.exe windows x86
aee9a14f126f120b215390537838c3e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryW
TlsGetValue
GetStringTypeA
FindClose
GetCurrentProcess
HeapFree
GetFileAttributesW
GlobalLock
IsValidCodePage
CreateEventA
GetCurrentThread
SetLastError
GetFileAttributesW
GetPrivateProfileSectionA
VirtualProtectEx
GetVersionExA
RemoveDirectoryW
LocalFlags
GetModuleHandleA
GetLocaleInfoW
GetExitCodeThread
user32
SetCursorPos
DefDlgProcA
GetWindowLongW
DispatchMessageA
LoadCursorA
SetCursor
IsDialogMessageA
SetFocus
PostMessageW
PeekMessageW
GetWindowTextW
wsprintfW
IsWindow
msdtcprx
DTC_XaEnd
DTC_XaCommit
DTC_XaOpen
DTC_XaStart
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE