Static task
static1
Behavioral task
behavioral1
Sample
e81442a630d7897d46c91a01ac26ec2ee19c28c9c4b6d63518de8f38ce54acee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e81442a630d7897d46c91a01ac26ec2ee19c28c9c4b6d63518de8f38ce54acee.exe
Resource
win10v2004-20220812-en
General
-
Target
e81442a630d7897d46c91a01ac26ec2ee19c28c9c4b6d63518de8f38ce54acee
-
Size
301KB
-
MD5
0417d04e7cc5260d84054ada5e2d5d9d
-
SHA1
2623cb7bbc023c67adea3c535a202148524f823d
-
SHA256
e81442a630d7897d46c91a01ac26ec2ee19c28c9c4b6d63518de8f38ce54acee
-
SHA512
df41ad3bb0360ff7e1dd44b04e2c1b517c23350d4237aad209bd9fb8d70b22ed74879d76724c8b97629a4263edc8435fc5dae6606ecda5612115125a3e5c4d76
-
SSDEEP
6144:novWny8qM0OWVXELEf87NCVMjZCXdCSbRAu6emRDTFeOO0aOiX5I:NvbAUQf1VMjotNbt6emRvK0diX5I
Malware Config
Signatures
Files
-
e81442a630d7897d46c91a01ac26ec2ee19c28c9c4b6d63518de8f38ce54acee.exe windows x86
1ce9b38773802221dc09d0d62c9fb13f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoA
TlsGetValue
IsValidCodePage
GetCurrentProcess
GetStringTypeA
CreateDirectoryW
VirtualProtect
IsBadWritePtr
MapViewOfFile
GetDriveTypeW
GetFileAttributesA
SetLastError
GetTickCount
LocalLock
HeapSize
FindResourceA
GetExitCodeThread
GetFileAttributesA
GetModuleHandleA
FindClose
RemoveDirectoryW
user32
SetFocus
LoadImageW
LoadCursorA
PeekMessageW
GetWindowTextW
PostMessageW
DispatchMessageA
IsWindow
wsprintfW
LoadStringA
GetWindowLongW
SetCursor
IsDialogMessageA
msctf
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
TF_InitSystem
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE