Static task
static1
Behavioral task
behavioral1
Sample
e5bc5b531e3cdbbd4382b156f06452691abc3bbb1729dd01c46cfb5f29b669fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5bc5b531e3cdbbd4382b156f06452691abc3bbb1729dd01c46cfb5f29b669fe.exe
Resource
win10v2004-20220812-en
General
-
Target
e5bc5b531e3cdbbd4382b156f06452691abc3bbb1729dd01c46cfb5f29b669fe
-
Size
775KB
-
MD5
0a49e1dfc6b8b0c20d89e588425c5526
-
SHA1
885efd8032e94078575ad0d738bd9e66094701d1
-
SHA256
e5bc5b531e3cdbbd4382b156f06452691abc3bbb1729dd01c46cfb5f29b669fe
-
SHA512
cbfeed0c091317ed6478e8da479245c9cbbbd612230eb4793bb5f3452a8924c955fbf983979f6ce15007fea40c6cc81a0d5e8b044844e63670b950cdd1e3c4b1
-
SSDEEP
12288:/p/A6KggGkABAfZt8752kuw4Ek2FPUOGYMcG9Dupo2EiJvl5dqs8Fm0mah:h/keAz8752k9kgPUfYK96pFvr0
Malware Config
Signatures
Files
-
e5bc5b531e3cdbbd4382b156f06452691abc3bbb1729dd01c46cfb5f29b669fe.exe windows x86
760601ea6efb99d2e548ab38dda12453
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
lstrlenW
GetStartupInfoA
GetModuleHandleA
WriteConsoleW
GetLastError
SetEvent
GetFileAttributesA
CopyFileW
ReleaseMutex
GetPriorityClass
CreatePipe
lstrcpyW
ClearCommBreak
IsDebuggerPresent
GetStdHandle
DisconnectNamedPipe
WriteConsoleW
HeapCreate
CloseHandle
GetCurrentDirectoryA
msftedit
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichListBoxWndProc
RichEditWndProc
shell32
StrChrA
DragFinish
SHGetSettings
DragQueryFileA
ShellMessageBoxA
DllUnregisterServer
SHFree
SHGetDiskFreeSpaceA
ShellAboutA
ExtractIconA
SHGetMalloc
DuplicateIcon
DragAcceptFiles
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ