Static task
static1
Behavioral task
behavioral1
Sample
e146fa874d0fa4d078dd9b24f93e1cd792c4acdc66635d9e987d696c4604f0c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e146fa874d0fa4d078dd9b24f93e1cd792c4acdc66635d9e987d696c4604f0c4.exe
Resource
win10v2004-20220812-en
General
-
Target
e146fa874d0fa4d078dd9b24f93e1cd792c4acdc66635d9e987d696c4604f0c4
-
Size
299KB
-
MD5
561c4d5516664d1c4739fd4f028644bb
-
SHA1
321cfed140ab083bc53135430af17c2d5249e14d
-
SHA256
e146fa874d0fa4d078dd9b24f93e1cd792c4acdc66635d9e987d696c4604f0c4
-
SHA512
09200552965faf4b856eee687bac5837e653ec6c5b889daedde1a0ff28478648989340bed013773a2f76f762f4961b768d1da6b9bef1b8044e2ed3e45bfd8d0d
-
SSDEEP
6144:kLZaePUXYY1GFZ8vHebmmGOpV/Xc6Ntb6ufc/oiCNfbvWkZs1D6Z:kLEeaeMvSrz/Xc0oMi4DvWSG
Malware Config
Signatures
Files
-
e146fa874d0fa4d078dd9b24f93e1cd792c4acdc66635d9e987d696c4604f0c4.exe windows x86
ec7b57abd7ae5c32bf3c8befcd61f9dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
IsBadCodePtr
CreatePipe
GetModuleHandleA
GetStartupInfoA
WriteConsoleW
SetEvent
GetPriorityClass
lstrcpyW
GetFileAttributesA
DisconnectNamedPipe
IsBadStringPtrA
WriteConsoleW
IsValidLocale
WriteConsoleW
lstrlenW
ReleaseMutex
CopyFileW
HeapCreate
GetLastError
GetCurrentDirectoryA
msftedit
RichEditWndProc
RichComboBoxWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
shell32
ShellAboutA
DuplicateIcon
SHGetSettings
StrChrA
DragQueryFileA
ShellMessageBoxA
SHGetDiskFreeSpaceA
SHGetMalloc
SHGetMalloc
ExtractIconA
ShellMessageBoxA
SHGetDiskFreeSpaceA
DragAcceptFiles
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ