Static task
static1
Behavioral task
behavioral1
Sample
e9fa137bf070e1d5267e050049e1be3ee1b40e23dbdf848bf3f5f06747744495.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9fa137bf070e1d5267e050049e1be3ee1b40e23dbdf848bf3f5f06747744495.exe
Resource
win10v2004-20221111-en
General
-
Target
e9fa137bf070e1d5267e050049e1be3ee1b40e23dbdf848bf3f5f06747744495
-
Size
272KB
-
MD5
4f4dde4543fed8def4e91f5438c5e840
-
SHA1
1c499a6962a9ef99a673c3dc9e46b1a5b63e0b21
-
SHA256
e9fa137bf070e1d5267e050049e1be3ee1b40e23dbdf848bf3f5f06747744495
-
SHA512
51c326f8fc8e27b7d1896f8fbbe2c2e8855a39df45b4f8b619115254c893601cd10db5e51db8604d0470c6acff68244d43f024488c9c3b62a62e06c3abe7f8d8
-
SSDEEP
6144:Taoex/JTc7V6cVcf8AIkGAVNo0ASy2kOjJSeGj22yBZbDjHUlPo:xeJ2V6cvPkGchA9gjFpfko
Malware Config
Signatures
Files
-
e9fa137bf070e1d5267e050049e1be3ee1b40e23dbdf848bf3f5f06747744495.exe windows x86
55efa873a275ba9b0b6ae094ba62daab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
fmifs
DiskCopy
Chkdsk
ComputeFmMediaType
FormatEx
Format
Extend
EnableVolumeCompression
w32topl
ToplScheduleExportReadonly
ToplScheduleCacheDestroy
ToplSTHeapInit
ToplSTHeapDestroy
ToplSTHeapExtractMin
ToplScheduleCreate
ToplScheduleCacheCreate
ToplScheduleDuration
kernel32
GetOEMCP
GetProcessHeap
SystemTimeToFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
GetCurrentProcess
HeapAlloc
lstrlenW
GetTickCount
lstrcmpA
lstrcpyW
FindResourceW
SetLastError
GetLocaleInfoW
CloseHandle
MultiByteToWideChar
GetLocalTime
LoadLibraryA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CreateFileA
Sections
.text Size: 267KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ