Static task
static1
Behavioral task
behavioral1
Sample
e6797da6fb04c88feba63333a59924a0169e69d0d245d0ca584e4b3090534930.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6797da6fb04c88feba63333a59924a0169e69d0d245d0ca584e4b3090534930.exe
Resource
win10v2004-20220901-en
General
-
Target
e6797da6fb04c88feba63333a59924a0169e69d0d245d0ca584e4b3090534930
-
Size
137KB
-
MD5
a2c9446029e161cbded6c024581179b0
-
SHA1
77f1e86601b86fd6f3cef44b751be5a541f01092
-
SHA256
e6797da6fb04c88feba63333a59924a0169e69d0d245d0ca584e4b3090534930
-
SHA512
fbcbe6f664f29d668c1f8a088321e67b7e6daf5fd6bec3a8d39e559fa511ed4682e8fa85d509f1154adf5988e0cd87d5ea140f963a812f8ec3d35b79cce0cea0
-
SSDEEP
3072:dNjJlLSK0Cmtm+T43lnOvv/nlh5l/3BFi3AlpRh5:/lhl0CJ+8356tTl/D7lvP
Malware Config
Signatures
Files
-
e6797da6fb04c88feba63333a59924a0169e69d0d245d0ca584e4b3090534930.exe windows x86
27fee45c635e7fe4833133dbd22c3196
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
GetFileAttributesA
CreateDirectoryW
GetLocaleInfoA
GetTickCount
MapViewOfFile
IsValidCodePage
VirtualProtect
HeapSize
GetDriveTypeW
GetCurrentProcess
FindResourceA
GetExitCodeThread
SetLastError
GetStringTypeA
GetFileAttributesA
RemoveDirectoryW
GetModuleHandleA
FindClose
LocalLock
IsBadWritePtr
user32
GetWindowLongW
SetFocus
IsDialogMessageA
GetCapture
IsWindow
PostMessageW
DispatchMessageA
LoadImageW
PeekMessageW
SetCursor
LoadCursorA
wsprintfW
GetWindowTextW
msaatext
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE