Static task
static1
Behavioral task
behavioral1
Sample
e9fa4ad461668ef8b4855b79885c7eaaa73988e1838a094f734951922e6dc49c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9fa4ad461668ef8b4855b79885c7eaaa73988e1838a094f734951922e6dc49c.exe
Resource
win10v2004-20220812-en
General
-
Target
e9fa4ad461668ef8b4855b79885c7eaaa73988e1838a094f734951922e6dc49c
-
Size
436KB
-
MD5
4009cd042071c81ce9c1aaa13ac046f2
-
SHA1
0f1bdea84a7686c8e81f828056b841be17b6714c
-
SHA256
e9fa4ad461668ef8b4855b79885c7eaaa73988e1838a094f734951922e6dc49c
-
SHA512
bde44fd68aff6d72107e368f96601ba9ff409ff0882d1f4a03c704e9ae1e1b2ba8753c7bad5dcdfd9e677302b9e917667ba046e893634419ea6ea7252d129c5d
-
SSDEEP
12288:/qwp+HxvWzCY3T7pXgYxcLfILmZy5CA6VpPRy4ton:NEYCY3Thg+MgLWUCA6Jyk
Malware Config
Signatures
Files
-
e9fa4ad461668ef8b4855b79885c7eaaa73988e1838a094f734951922e6dc49c.exe windows x86
e3573fd5e5ee5f2485cdd850a7292e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
GetModuleHandleA
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
RegisterClassExA
TranslateMessage
Sections
.flat Size: 423KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cjlr Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.jfmaac Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ