Static task
static1
Behavioral task
behavioral1
Sample
e14d42a6b703dd147e68f47ffb75ae28e2056a7ea6066e1ede72434129b0a7e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e14d42a6b703dd147e68f47ffb75ae28e2056a7ea6066e1ede72434129b0a7e0.exe
Resource
win10v2004-20220812-en
General
-
Target
e14d42a6b703dd147e68f47ffb75ae28e2056a7ea6066e1ede72434129b0a7e0
-
Size
255KB
-
MD5
a2ed99c78691ff0bd2f1054812bce6f0
-
SHA1
811018a272fbdc4394388e533075531437123d36
-
SHA256
e14d42a6b703dd147e68f47ffb75ae28e2056a7ea6066e1ede72434129b0a7e0
-
SHA512
d2b5d768bd15477d2b1a0535baae483bf57c8685b204b077810fc4155649bc0324e9adb2e592bca57368aec53e86f73ed1c9cfa4d98efbba3c9d0243584bb381
-
SSDEEP
6144:00c96PTqG/zOtbcFA0/xuu0nNCclMfSl/X4UGPd:0r9QKbcm+oCMMfSBX4UGPd
Malware Config
Signatures
Files
-
e14d42a6b703dd147e68f47ffb75ae28e2056a7ea6066e1ede72434129b0a7e0.exe windows x86
f04122d4bff922dfcb21b545dcfc130c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
HeapReAlloc
SetComputerNameW
CallNamedPipeW
LoadLibraryExW
WaitForDebugEvent
GetProcAddress
LocalLock
LoadLibraryA
DosDateTimeToFileTime
CreateHardLinkA
CreateSemaphoreW
BackupWrite
lstrlenA
GetPrivateProfileSectionA
GetStdHandle
CancelIo
QueryDosDeviceA
LoadResource
CompareFileTime
CallNamedPipeA
DisconnectNamedPipe
GetTempPathA
GlobalFindAtomA
GetLogicalDriveStringsW
OpenSemaphoreA
TransmitCommChar
GetModuleHandleA
SetProcessAffinityMask
lstrcmpA
LocalHandle
BuildCommDCBAndTimeoutsW
GetProcessPriorityBoost
GetCompressedFileSizeA
OpenJobObjectW
CreateProcessA
GetCommandLineW
ClearCommError
SetThreadExecutionState
HeapWalk
SignalObjectAndWait
TerminateJobObject
GetFileType
VirtualAlloc
SetEnvironmentVariableW
IsBadWritePtr
SetTapeParameters
FlushFileBuffers
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
SetStdHandle
LCMapStringA
CloseHandle
user32
EnumPropsExW
Sections
.text Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ