Static task
static1
Behavioral task
behavioral1
Sample
e2470a46deb2d8d9651d0d1b7e61ccdba637817a3bcca4ad2c983e13d5918177.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2470a46deb2d8d9651d0d1b7e61ccdba637817a3bcca4ad2c983e13d5918177.exe
Resource
win10v2004-20220812-en
General
-
Target
e2470a46deb2d8d9651d0d1b7e61ccdba637817a3bcca4ad2c983e13d5918177
-
Size
116KB
-
MD5
0dba7b27a3ec0ab7ea8a6c2bdf6b9f6e
-
SHA1
df2f8b77f48b54b3c425c9539d82791cf7b917c2
-
SHA256
e2470a46deb2d8d9651d0d1b7e61ccdba637817a3bcca4ad2c983e13d5918177
-
SHA512
fdf8f25f326ee56af91ad8f8745ffebd6e98ab49a2495dacd4d6845db377e72aabf6129b01789f5db92c21cb84af749f241ec2ed17fb99f1c29e2d6ed6001b78
-
SSDEEP
1536:7WyG7HDyBu0vWD0dbN/EV7yzHLo//cl3A2MHZerb0b7HHPcClcW70U:YHeBuZ0db2gP62MHZ3b73l3
Malware Config
Signatures
Files
-
e2470a46deb2d8d9651d0d1b7e61ccdba637817a3bcca4ad2c983e13d5918177.exe windows x86
b2423424379e66b05e87994faeaf37c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
EnterCriticalSection
FormatMessageA
InterlockedDecrement
WideCharToMultiByte
lstrlenA
GetModuleHandleA
LocalFree
LeaveCriticalSection
GetStartupInfoA
user32
GetActiveWindow
DestroyWindow
DefWindowProcA
SetWindowLongA
GetParent
GetWindow
GetWindowRect
GetWindowLongA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
GetWindowTextLengthA
SendMessageA
EndDialog
GetSystemMetrics
LoadImageA
DialogBoxParamA
shell32
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysFreeString
SysAllocString
VariantClear
comctl32
InitCommonControlsEx
msvcrt
__CxxFrameHandler
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_vsnprintf
wcslen
_stricmp
memset
strlen
free
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_controlfp
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�suVA� Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE