Static task
static1
Behavioral task
behavioral1
Sample
e46ad35cf734dc83c2957bfc32a6b52173a11f61a785f38373a88ec5d8f790ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e46ad35cf734dc83c2957bfc32a6b52173a11f61a785f38373a88ec5d8f790ef.exe
Resource
win10v2004-20220812-en
General
-
Target
e46ad35cf734dc83c2957bfc32a6b52173a11f61a785f38373a88ec5d8f790ef
-
Size
89KB
-
MD5
0ca76a9f8ace0d40c96adc4362b20b70
-
SHA1
d28df7ad0c34170df96fe125ab47eb65f00eddc0
-
SHA256
e46ad35cf734dc83c2957bfc32a6b52173a11f61a785f38373a88ec5d8f790ef
-
SHA512
27e41419228285a4590168e2c271cb0192c6b3f11e0ef8016b3b66fed97ed826c069db4e5733ce6cef36ca4cdb85882f5ca53e36025e470abc2bf6060c90e36c
-
SSDEEP
1536:Upt0kzonA0m6XIQFmZdLOR+aZWQPAv+ocvp5DpNT:OWkzonAFwxCOlPAv+Xp5DpN
Malware Config
Signatures
Files
-
e46ad35cf734dc83c2957bfc32a6b52173a11f61a785f38373a88ec5d8f790ef.exe windows x86
bdc9d3edd3c719be921ca3df8908c765
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__set_app_type
_controlfp
__p__commode
_except_handler3
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcscat
_wcsupr
swprintf
wcslen
iswdigit
_wtoi
wcscpy
??2@YAPAXI@Z
_wcsicmp
swscanf
printf
malloc
free
??3@YAXPAX@Z
kernel32
GetModuleHandleW
GetLastError
DeviceIoControl
CreateFileW
GetModuleHandleA
WideCharToMultiByte
ntmsapi
SetNtmsObjectInformationW
AccessNtmsLibraryDoor
EjectNtmsMedia
DismountNtmsMedia
CreateNtmsMediaPoolW
CloseNtmsSession
DeallocateNtmsMedia
EnumerateNtmsObject
GetNtmsObjectInformationW
OpenNtmsSessionW
DeleteNtmsMediaPool
SetNtmsDeviceChangeDetection
InventoryNtmsLibrary
AllocateNtmsMedia
MountNtmsMedia
user32
LoadStringW
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lbwifsg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE