Static task
static1
Behavioral task
behavioral1
Sample
e96847f3734602a63a6f98522c63666a3378725eda36fee785a0d92b515ed37a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e96847f3734602a63a6f98522c63666a3378725eda36fee785a0d92b515ed37a.exe
Resource
win10v2004-20220901-en
General
-
Target
e96847f3734602a63a6f98522c63666a3378725eda36fee785a0d92b515ed37a
-
Size
797KB
-
MD5
5071bcda9cdf8e1507a06d7514f057d0
-
SHA1
fd8e39baf7851c9afb7624c2274c207e19264fab
-
SHA256
e96847f3734602a63a6f98522c63666a3378725eda36fee785a0d92b515ed37a
-
SHA512
c3570eb178d8a26f86b09badf0f393c62578f0f74313f0972a06ea13072a624be0736f13ef1c313c862f5c1c7170dc56dc161920ac32453d53afee11ecac6712
-
SSDEEP
12288:U6NR8/PPXk7a58DBZmi61UYn0mo4Pdk93hWo7ZLgSUwwczxVSCQfuQEx3olixPbF:XA4/Daf1Ug22m3HySisVSNwx3H9b
Malware Config
Signatures
Files
-
e96847f3734602a63a6f98522c63666a3378725eda36fee785a0d92b515ed37a.exe windows x86
7197903bd33aa4bccf9d1969e84e8883
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
CreateDirectoryW
FindClose
GetCurrentProcess
GetCurrentThread
GlobalLock
GetModuleHandleA
SetLastError
SetCommBreak
LocalFlags
RemoveDirectoryW
GetVersionExA
DeviceIoControl
HeapFree
CloseHandle
GetFileAttributesW
GetPrivateProfileIntA
CreateEventA
GetStringTypeA
GetFileAttributesW
GetPrivateProfileSectionA
user32
GetWindowLongW
IsDialogMessageA
IsWindow
GetWindowTextW
DispatchMessageA
IsZoomed
LoadCursorW
PostMessageW
SetFocus
GrayStringA
SetCursorPos
wsprintfW
PeekMessageW
mswsock
GetServiceA
GetNameByTypeA
getnetbyname
GetAddressByNameA
ntshrui
IsPathSharedA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ