Static task
static1
Behavioral task
behavioral1
Sample
e4e87140ca2b5380c51c3f32aa85545e741dfb0adcdc9e1833f7d9f22bd2dbfc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4e87140ca2b5380c51c3f32aa85545e741dfb0adcdc9e1833f7d9f22bd2dbfc.exe
Resource
win10v2004-20220812-en
General
-
Target
e4e87140ca2b5380c51c3f32aa85545e741dfb0adcdc9e1833f7d9f22bd2dbfc
-
Size
108KB
-
MD5
0e1223f82a7dfdc6e29c88a8450c711e
-
SHA1
d6c16bc73774677841afeb9b1af5fa6d16969f74
-
SHA256
e4e87140ca2b5380c51c3f32aa85545e741dfb0adcdc9e1833f7d9f22bd2dbfc
-
SHA512
e9ed467f8b991ad0a9402392f91a69bc190620f1d416e7e273d07e9fa4904ab498c131f31f4e20e740ee81351a4fd155e7c020edfa74cce7bf762c7cf18d927f
-
SSDEEP
3072:Lt24D5L12coXLQCsalMgIqfZNoeEZ5gj5ZLzy:LHDScob5FE0ZLzy
Malware Config
Signatures
Files
-
e4e87140ca2b5380c51c3f32aa85545e741dfb0adcdc9e1833f7d9f22bd2dbfc.exe windows x86
1548a6559de2f94b647911940327b2f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetThreadLocale
GetCurrentDirectoryA
GetSystemTime
GlobalLock
GetProcAddress
DeleteFileA
IsValidCodePage
RtlMoveMemory
GetModuleHandleA
VirtualProtect
LoadResource
FileTimeToSystemTime
QueryPerformanceCounter
SetThreadLocale
LCMapStringW
GetCurrentThread
lstrcpyA
GetUserDefaultLCID
MultiByteToWideChar
VirtualQuery
GetTempPathA
InterlockedCompareExchange
SizeofResource
GetTempFileNameA
GlobalAlloc
GetSystemDirectoryW
WaitForSingleObject
RemoveDirectoryA
msvcrt
tan
_exit
_except_handler3
_XcptFilter
__getmainargs
_controlfp
_initterm
__p__commode
__p___initenv
__set_app_type
__p__fmode
_adjust_fdiv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Enyzeopy Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ