Static task
static1
Behavioral task
behavioral1
Sample
e8415dc51ec5a34acc434fcfad597219fafc96cbc72fef7356ed17344b69a003.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8415dc51ec5a34acc434fcfad597219fafc96cbc72fef7356ed17344b69a003.exe
Resource
win10v2004-20220812-en
General
-
Target
e8415dc51ec5a34acc434fcfad597219fafc96cbc72fef7356ed17344b69a003
-
Size
79KB
-
MD5
053ed27fdaf9a4b64672530424e2def0
-
SHA1
5964c7e15f1bf3238bef46ec585bb35c44e9f4bf
-
SHA256
e8415dc51ec5a34acc434fcfad597219fafc96cbc72fef7356ed17344b69a003
-
SHA512
06ac46a1a36fb520f112fb1885c1f8045c35bc01b11072abdd85fc672d9dd7a0d60b51ea94bc666d338e425c564165304548175a6ea76c6d3e159930c90a2ffe
-
SSDEEP
1536:NcxDLaKPWYvejTW+S98wSz3IF9E1XlDvxDUNGSG8BRPBIzqcmKw+egW:NcxnsMfZ9Kw9ODvxDUNGSG8BRPBIzqcH
Malware Config
Signatures
Files
-
e8415dc51ec5a34acc434fcfad597219fafc96cbc72fef7356ed17344b69a003.exe windows x86
e7511598a37ab494c084a06f157991ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommTimeouts
WritePrivateProfileStructA
GetCommState
GetPriorityClass
GetSystemWindowsDirectoryA
UnlockFileEx
FormatMessageA
VirtualProtectEx
OpenMutexA
IsProcessorFeaturePresent
ReadConsoleInputA
lstrlenA
GetLastError
GetSystemDirectoryA
IsBadReadPtr
WaitNamedPipeA
VirtualAlloc
PeekConsoleInputA
GetCommMask
DeviceIoControl
WriteConsoleOutputCharacterA
CreateNamedPipeA
RtlMoveMemory
advapi32
CredMarshalCredentialW
CredUnmarshalCredentialA
dpmodemx
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE