Static task
static1
Behavioral task
behavioral1
Sample
e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b.exe
Resource
win10v2004-20220812-en
General
-
Target
e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b
-
Size
50KB
-
MD5
83f4e4796b55254b4ae0aeb1779bfd34
-
SHA1
f65ecba954844c5f329f2ac7a6d371b4d627659e
-
SHA256
e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b
-
SHA512
33e470056ed4a4d3f733700b0ef3cfe631cb3db329477e7a7ad95b56e95853bef01d13db7c4ce7c58a0f3f8ba9ce664e297ef2779e7ae7eb5d8a26e6d27b8d5c
-
SSDEEP
768:VIHQF1YCzsFmvrPaNqVPJKW3cEoxgtLPILaNilcpXcKpUu5ovyavoc:qw5bzJPYm1P8a82phpUYiya
Malware Config
Signatures
Files
-
e9ffa4216e130026bda8fbcabf761b8f378939daf133601b6f3d25ae72393f3b.exe windows x86
536c35e361b8b671498d1baf00bbbda5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA
user32
MessageBoxA
Sections
.data Size: - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 6KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE