Static task
static1
Behavioral task
behavioral1
Sample
e9e34ef26c503bc6d6a777312f4e9e5f739594f438b0242153f306c769bdee78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9e34ef26c503bc6d6a777312f4e9e5f739594f438b0242153f306c769bdee78.exe
Resource
win10v2004-20220812-en
General
-
Target
e9e34ef26c503bc6d6a777312f4e9e5f739594f438b0242153f306c769bdee78
-
Size
148KB
-
MD5
560f45370878161c066c463fe10ccff3
-
SHA1
8c62366ef58eb69a6a29222150196f568b8b831f
-
SHA256
e9e34ef26c503bc6d6a777312f4e9e5f739594f438b0242153f306c769bdee78
-
SHA512
fe625dc629283c0b508b64bf0db4beded9e94041e6cee8ae4b68d7d83c9da751354bc48cb3b0f2bbf49bdf87e226511075357646f1b245096eabfcfed66f8824
-
SSDEEP
3072:DkKfKd7aTGqwp8OVimc1qy+gg5EfLk1FdN+IyZbDuJaOYOeG6TcoE+Rs:DcYtmc19FfLkvdN+tZbDuJaOYOetbts
Malware Config
Signatures
Files
-
e9e34ef26c503bc6d6a777312f4e9e5f739594f438b0242153f306c769bdee78.exe windows x86
24154fc2ec30b05d71bcac6f5145598a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
__p__fmode
__set_app_type
__p__commode
_initterm
printf
__setusermatherr
_adjust_fdiv
_exit
_stricmp
??3@YAXPAX@Z
memmove
??2@YAPAXI@Z
_iob
fprintf
__getmainargs
__p___initenv
exit
_XcptFilter
_except_handler3
_controlfp
advapi32
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
kernel32
LoadLibraryA
GetProcAddress
lstrlenA
lstrcpyA
GetCurrentDirectoryA
lstrlenW
GetModuleHandleW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ducbjvg Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dlzvwev Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ecwixvf Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ngyxgxv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE