Static task
static1
Behavioral task
behavioral1
Sample
e88384fab191b368c1f214a884573c9f57ca86af215a37a7403d3d2e093f58d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e88384fab191b368c1f214a884573c9f57ca86af215a37a7403d3d2e093f58d6.exe
Resource
win10v2004-20220812-en
General
-
Target
e88384fab191b368c1f214a884573c9f57ca86af215a37a7403d3d2e093f58d6
-
Size
206KB
-
MD5
92598fe47ff943e1a5a9a6b9f853fcb9
-
SHA1
759e4b960c99f93bbefc58cfa52c5e47b1cc308f
-
SHA256
e88384fab191b368c1f214a884573c9f57ca86af215a37a7403d3d2e093f58d6
-
SHA512
3eb5217cf8bc2640d823c3eca0d038e09089ec76ca5fee38da398a9c9081a74c26a8785b2980df9e9c370c5b4335012971886c7563a8298054d0df9ff7729bc4
-
SSDEEP
6144:bT7X2TSGwEmq6B7ket2nEzvG458rA8/be5E738ykz:Pr22IUX0E7G45Oe5EwZz
Malware Config
Signatures
Files
-
e88384fab191b368c1f214a884573c9f57ca86af215a37a7403d3d2e093f58d6.exe windows x86
3811608d106bc5bdb881254d6131ef83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
kernel32
GetVolumeInformationA
lstrcpyA
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
FindResourceA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
IsValidLocale
HeapAlloc
SetLastError
GetProcessHeap
GetTickCount
GetCurrentProcess
lstrlenA
GetSystemTimeAsFileTime
GetLocaleInfoA
lstrcmpA
HeapFree
MultiByteToWideChar
CreateFileA
QueryPerformanceCounter
LockResource
SystemTimeToFileTime
CloseHandle
schannel
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
advapi32
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ