Static task
static1
Behavioral task
behavioral1
Sample
e217448707f269e8816f230054dcf4a49cf3425229e5350633e0ac828467b48b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e217448707f269e8816f230054dcf4a49cf3425229e5350633e0ac828467b48b.exe
Resource
win10v2004-20220812-en
General
-
Target
e217448707f269e8816f230054dcf4a49cf3425229e5350633e0ac828467b48b
-
Size
196KB
-
MD5
0e6e594d43f7e484912856e696a6e831
-
SHA1
9be7fee3c6e4d72c0b0edd6da2fa8cebf086fe03
-
SHA256
e217448707f269e8816f230054dcf4a49cf3425229e5350633e0ac828467b48b
-
SHA512
cc2186dd8805e0b014ed8da4b8acbb9de03d72f6dde69f09846efed03609d0105bb83322995331d68a1bb4e7188ad100e486aba30905e115b1f09277bf46cd05
-
SSDEEP
3072:/c05nLKrbVAUKnktabNHjni6VvQxlvYzkYMtNKIgNL//wqYPLESp:/d5gZIb1FabyVIsP0LR
Malware Config
Signatures
Files
-
e217448707f269e8816f230054dcf4a49cf3425229e5350633e0ac828467b48b.exe windows x86
5f156a8f7430d6125ba402d506d6ac00
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetSystemMetrics
GetDesktopWindow
CharNextA
kernel32
GetDriveTypeA
GetACP
GetCommandLineW
Sleep
lstrcmpiW
GetCurrentThreadId
GetTickCount
GetConsoleOutputCP
lstrlenA
QueryPerformanceCounter
VirtualAlloc
GetUserDefaultLangID
SetLastError
LoadLibraryW
GetVersion
DeleteFileA
GetCurrentProcess
GlobalFindAtomW
GetLastError
SetCurrentDirectoryA
IsDebuggerPresent
GetModuleHandleA
CopyFileA
GetStartupInfoA
lstrcmpA
GetThreadLocale
RemoveDirectoryA
GlobalFindAtomA
GetProcessHeap
GetModuleHandleW
MulDiv
lstrcmpiA
lstrlenW
GetWindowsDirectoryA
GetOEMCP
GetCommandLineA
GetCurrentProcessId
GetCurrentThread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ