Static task
static1
Behavioral task
behavioral1
Sample
e1b6cda33271823b8c53c2ca39ea3acfb03959566e26073fb5ab1f5f105437ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e1b6cda33271823b8c53c2ca39ea3acfb03959566e26073fb5ab1f5f105437ec.exe
Resource
win10v2004-20220812-en
General
-
Target
e1b6cda33271823b8c53c2ca39ea3acfb03959566e26073fb5ab1f5f105437ec
-
Size
84KB
-
MD5
91738d0f1892db61ca053a3c84a74332
-
SHA1
b1b5f83918b88f9f52cb8e86b9bbcea99299dcf2
-
SHA256
e1b6cda33271823b8c53c2ca39ea3acfb03959566e26073fb5ab1f5f105437ec
-
SHA512
6163f5c3741a1e89ae459dc5b15b38af9c81d1d0981756aa7192524acc0195a39db89ccb7f096b52c4b0af00e3313e9456fc11569427a9a1b592725af9fd1bb3
-
SSDEEP
1536:z9SnrROZ2FiyDk0PaYbGbP66ocD+vvMqn+0vLH:BArROcFiyDk0yNa0CBvL
Malware Config
Signatures
Files
-
e1b6cda33271823b8c53c2ca39ea3acfb03959566e26073fb5ab1f5f105437ec.exe windows x86
690416460aab805333f9e0924cd5772c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageA
GetModuleHandleA
CloseHandle
MultiByteToWideChar
CreateFileA
DeleteFileA
WriteFile
SystemTimeToFileTime
GetSystemTime
GetCPInfo
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FileTimeToDosDateTime
InterlockedDecrement
msacm32
acmStreamConvert
acmFormatTagDetailsA
acmStreamSize
acmStreamPrepareHeader
acmStreamClose
acmStreamOpen
acmFormatDetailsA
acmFormatSuggest
acmStreamUnprepareHeader
winmm
mmioSeek
mmioOpenA
mmioDescend
mmioRead
mmioAscend
mmioClose
rpcrt4
UuidCreate
user32
LoadStringA
msvcrt
_purecall
wcscpy
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
sscanf
fclose
fgets
fopen
_ftol
_mbscpy
_mbslen
_exit
_stricmp
_mbsicmp
__CxxFrameHandler
_EH_prolog
sprintf
wcstombs
_initterm
wcslen
wcscmp
_itoa
_adjust_fdiv
strncpy
__p__commode
_XcptFilter
exit
__p___initenv
__getmainargs
_except_handler3
__setusermatherr
?terminate@@YAXXZ
__p__fmode
__set_app_type
_controlfp
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE