Static task
static1
Behavioral task
behavioral1
Sample
e502d35ac9128419c2c284fdf5d3bb7abad0e38790b7d8e21f56043bcee2fcb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e502d35ac9128419c2c284fdf5d3bb7abad0e38790b7d8e21f56043bcee2fcb2.exe
Resource
win10v2004-20220812-en
General
-
Target
e502d35ac9128419c2c284fdf5d3bb7abad0e38790b7d8e21f56043bcee2fcb2
-
Size
153KB
-
MD5
92570b598a46a9ae02a8f9ba6b97c5e0
-
SHA1
8f630dc78c0a604e442297164724076fb0055110
-
SHA256
e502d35ac9128419c2c284fdf5d3bb7abad0e38790b7d8e21f56043bcee2fcb2
-
SHA512
de976696ed8bca0b564d528b0483cf81af446a1f0d808be6681ee6f46dc3b29bf7b7023aacdd5411681212293e127e6e8f74fa512c59d2776de3c97607800bfa
-
SSDEEP
3072:1PR2AgPh6i2AcACodDSedyAtLiAVeS7ZlMQcFmQG+9chS3RsOK0:1PR2AgZu3odOedyAtjoSQpFmJ+6SBsO7
Malware Config
Signatures
Files
-
e502d35ac9128419c2c284fdf5d3bb7abad0e38790b7d8e21f56043bcee2fcb2.exe windows x86
ac34c03b80b2b5cbbed8c8042f086123
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
kernel32
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
crtdll
__GetMainArgs
exit
raise
signal
advapi32
RevertToSelf
RegOpenKeyExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 616B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 218B - Virtual size: 218B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ