Static task
static1
Behavioral task
behavioral1
Sample
e6e948e12f04e419de5bb12830887f5bbf79ea9a97a4dda6462f721dec5a337a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6e948e12f04e419de5bb12830887f5bbf79ea9a97a4dda6462f721dec5a337a.exe
Resource
win10v2004-20220812-en
General
-
Target
e6e948e12f04e419de5bb12830887f5bbf79ea9a97a4dda6462f721dec5a337a
-
Size
118KB
-
MD5
a173cc30fdb2792db45d5edf47c6edde
-
SHA1
446112ac551d528dd3a2c41fe2fd4972fdd92b4a
-
SHA256
e6e948e12f04e419de5bb12830887f5bbf79ea9a97a4dda6462f721dec5a337a
-
SHA512
66310e75cc0b9833bd77bdad84cf8280c46f8283079a5d320fc07da44c299b74a62ce919608b2a3fc478636ee729a36d69b1f9a62213401c75c5bd785a17b449
-
SSDEEP
1536:OMVl50kjH+7D9C0nWv2+wA1PFEKJ/o8k6VauiNyrhsLi/IXdQEUW//vOaD:P+7DD09E8/oP6VauiNchsLLdsW3vOW
Malware Config
Signatures
Files
-
e6e948e12f04e419de5bb12830887f5bbf79ea9a97a4dda6462f721dec5a337a.exe windows x86
e30896b6fb23770ceaf12eb9041b3059
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
GetStdHandle
GetModuleFileNameA
Sleep
GetTickCount
SetConsoleTextAttribute
SetConsoleCursorInfo
SetConsoleCursorPosition
GetVolumeInformationA
LCMapStringW
LCMapStringA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetLastError
GetFileAttributesA
GetProcAddress
GetModuleHandleA
HeapFree
CloseHandle
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
WriteFile
ReadFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
winmm
timeGetTime
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ