Static task
static1
Behavioral task
behavioral1
Sample
e8813dc2362c42ef07e555a9b597e9859dceea7d1bc76b60b5dcde6c4d3e0902.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8813dc2362c42ef07e555a9b597e9859dceea7d1bc76b60b5dcde6c4d3e0902.exe
Resource
win10v2004-20220812-en
General
-
Target
e8813dc2362c42ef07e555a9b597e9859dceea7d1bc76b60b5dcde6c4d3e0902
-
Size
212KB
-
MD5
81e52c1b3de0273d731e054fb558fb70
-
SHA1
d8b29d4817fe9816a176e9988737204e86b530d5
-
SHA256
e8813dc2362c42ef07e555a9b597e9859dceea7d1bc76b60b5dcde6c4d3e0902
-
SHA512
23189aa155bd16139b9e5a12e105acd06b0ffe18452610b6a1f55cd222b0d1ae694191d5a5bd034f6cd7692ced647a2d82a6e77bd7b86b8f519401355b9a1e23
-
SSDEEP
3072:8idCNbbURSYja5HLmki3iSD+cJplHhpQ7RxPUD38+E6AUdFIiHTE8jDbkjlA6UYX:8vz1q4S6cJpFhpDM+E6Aa3QssA6rX
Malware Config
Signatures
Files
-
e8813dc2362c42ef07e555a9b597e9859dceea7d1bc76b60b5dcde6c4d3e0902.exe windows x86
ec37eb8a3384dc76d36b2aeada7a8375
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
MultiByteToWideChar
HeapAlloc
lstrlenW
GetSystemTimeAsFileTime
GetCurrentProcessId
lstrcpyW
SystemTimeToFileTime
HeapFree
WideCharToMultiByte
FindResourceW
GetLocalTime
GetTickCount
SetLastError
GetProcessHeap
GetLocaleInfoA
GetOEMCP
QueryPerformanceCounter
LoadLibraryW
CloseHandle
CreateFileA
lstrcmpA
SetUnhandledExceptionFilter
scecli
SceCloseProfile
SceAppendSecurityProfileInfo
SceAnalyzeSystem
SceAddToNameStatusList
SceBrowseDatabaseTable
wiadss
GetLoaderStatus
FindFirstImportDS
CloseFindContext
FindNextImportDS
UnloadImportDS
LoadImportDS
FindImportDSByDeviceName
wiashext
AddDeviceWasChosen
AddDeviceWasChosenW
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ