Static task
static1
Behavioral task
behavioral1
Sample
e1bd9a9be757c93c121fd921f305af6b1b77c92ae30ef6a314af0744251417a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1bd9a9be757c93c121fd921f305af6b1b77c92ae30ef6a314af0744251417a0.exe
Resource
win10v2004-20220812-en
General
-
Target
e1bd9a9be757c93c121fd921f305af6b1b77c92ae30ef6a314af0744251417a0
-
Size
173KB
-
MD5
8432d5d5a8323e496c2075df40fc11f3
-
SHA1
234a8b3bc627409c88c94bccdc247fc3e0a77c93
-
SHA256
e1bd9a9be757c93c121fd921f305af6b1b77c92ae30ef6a314af0744251417a0
-
SHA512
deeb68c9006f18f784eda12d5132a90f9e59179d64e6644e03fbe066230d436083d67dd69ef6946309491584a099fc4471c905ca1c81ad7cb1fe93413e8d1d03
-
SSDEEP
3072:ju5JHgFcO+V8pF2k9Hc3/nl6LAHkzI1UfgEA6IIyRFAZvnKRTFSTdCh0gsc8q+f3:jcJHgFyVuIk96kADoZPKRTIAigsNaJmJ
Malware Config
Signatures
Files
-
e1bd9a9be757c93c121fd921f305af6b1b77c92ae30ef6a314af0744251417a0.exe windows x86
a9db492cefa76d16dd22de56b393fdd7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libvlc
libvlc_add_intf
libvlc_new
libvlc_playlist_play
libvlc_release
libvlc_wait
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTime
GetVersionExW
HeapSetInformation
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_wfopen
_wremove
abort
atexit
exit
fclose
fflush
fputc
free
fwprintf
fwrite
getenv
localeconv
malloc
memcpy
signal
strlen
swprintf
vfprintf
wcscmp
wcslen
shell32
CommandLineToArgvW
SHGetFolderPathW
user32
MessageBoxW
wininet
FtpPutFileW
InternetCloseHandle
InternetConnectW
InternetOpenW
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gnu_deb Size: 512B - Virtual size: 16B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.cdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE