Static task
static1
Behavioral task
behavioral1
Sample
e1395be67ac65149d4fee06c8a4abab0be0c024b9ad85cb0964cce20ebac59ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e1395be67ac65149d4fee06c8a4abab0be0c024b9ad85cb0964cce20ebac59ec.exe
Resource
win10v2004-20220812-en
General
-
Target
e1395be67ac65149d4fee06c8a4abab0be0c024b9ad85cb0964cce20ebac59ec
-
Size
409KB
-
MD5
0a5b6402f03a49b064b6554cdaa88ca4
-
SHA1
7bea790fdc3f5f9b9462563a5428f03998c92e41
-
SHA256
e1395be67ac65149d4fee06c8a4abab0be0c024b9ad85cb0964cce20ebac59ec
-
SHA512
c20611ef0f9b343f3b27e68e0dae259d3268b9a72d4d32d39f62f12bd5274caf229d160cfb4313b1287a69ece28e71f126b11367acd14f5dda36bed7222cdf2f
-
SSDEEP
6144:/+5tOURzNMWr3Q5NTIdR2vFFwuqkIHv+JhPxRed0PssRic/qDAGxXfP+A8/aD3Pk:/+5bNMpN8Tc0uqky+zPxMQ3CXxX+8Df
Malware Config
Signatures
Files
-
e1395be67ac65149d4fee06c8a4abab0be0c024b9ad85cb0964cce20ebac59ec.exe windows x86
72d42d6f07762e1332cea2a7aae20fe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
CreateDirectoryW
GetCurrentProcess
CloseHandle
GetFileAttributesW
GetStringTypeA
GetStdHandle
RemoveDirectoryW
FindClose
GetVersionExA
CreateEventA
GetModuleHandleA
GetCurrentThread
GetFileAttributesW
SetLastError
GlobalLock
VirtualProtectEx
DeviceIoControl
LocalFlags
GetPrivateProfileIntA
GetPrivateProfileSectionA
user32
DispatchMessageA
GetWindowLongW
PeekMessageW
PostMessageW
SetFocus
IsZoomed
IsCharLowerA
GetWindowTextW
LoadCursorW
IsDialogMessageA
IsWindow
wsprintfW
SetCursorPos
ntmarta
AccGetExplicitEntries
AccFreeIndexArray
AccConvertSDToAccess
AccConvertAclToAccess
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ