Static task
static1
Behavioral task
behavioral1
Sample
e3d5f58186a9f4e1a18e4d87b4418e27f935d2f80e5e9f90209771b881279c87.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3d5f58186a9f4e1a18e4d87b4418e27f935d2f80e5e9f90209771b881279c87.exe
Resource
win10v2004-20220812-en
General
-
Target
e3d5f58186a9f4e1a18e4d87b4418e27f935d2f80e5e9f90209771b881279c87
-
Size
96KB
-
MD5
0476fc5f8f9452be825b414c339a1a00
-
SHA1
9f652d25359b6a96643c657bc9dc06c678e796de
-
SHA256
e3d5f58186a9f4e1a18e4d87b4418e27f935d2f80e5e9f90209771b881279c87
-
SHA512
62ae209642fcf8607b6a04949d254ed77ab63a488385ab4a8070232cdca01c1a60a99b10b668d858d542256838451e42184765009fc5c0872ef4a08ce96cb8b2
-
SSDEEP
1536:lKOLBBmwZmhMprlJfXNIhI1+P/3uzM3X4O6oqc/+PuNsx:8SBrRVlJ1TwP/3uOD+Pusx
Malware Config
Signatures
Files
-
e3d5f58186a9f4e1a18e4d87b4418e27f935d2f80e5e9f90209771b881279c87.exe windows x86
757a7ceecfe8bd3f37ae344ac7640125
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
lstrcpyA
DeleteFileA
GetDriveTypeA
ExitProcess
GlobalLock
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
WideCharToMultiByte
CompareFileTime
GetTickCount
GetModuleFileNameW
GetExitCodeProcess
GetConsoleMode
FreeEnvironmentStringsA
SetFilePointer
RtlUnwind
LoadResource
MulDiv
CreateDirectoryA
GetUserDefaultLangID
LoadLibraryW
GetShortPathNameA
VirtualFree
GetModuleHandleA
GetSystemInfo
VirtualProtect
GlobalFree
DeleteFileW
CreateFileMappingA
SetHandleCount
lstrcatA
RemoveDirectoryA
GetFileAttributesW
GetCurrentProcess
GetFileTime
GetThreadLocale
SetCurrentDirectoryA
WaitForMultipleObjects
GetTempPathA
OutputDebugStringA
GetCommandLineW
GetVersionExA
GetCommandLineA
IsDebuggerPresent
msvcrt
__getmainargs
_except_handler3
__p__commode
__p___initenv
_XcptFilter
__set_app_type
__p__fmode
_exit
_adjust_fdiv
_initterm
_controlfp
Sections
.text Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ