Static task
static1
Behavioral task
behavioral1
Sample
e8a70ae30985f1cb55dc0deabf40d2146625012b4948df7e278f018323d49bbe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8a70ae30985f1cb55dc0deabf40d2146625012b4948df7e278f018323d49bbe.exe
Resource
win10v2004-20220812-en
General
-
Target
e8a70ae30985f1cb55dc0deabf40d2146625012b4948df7e278f018323d49bbe
-
Size
184KB
-
MD5
34d99b50154d3233ec22154cfafd87d3
-
SHA1
332cf111ef2f743d1c26f607ac1e875774a68d93
-
SHA256
e8a70ae30985f1cb55dc0deabf40d2146625012b4948df7e278f018323d49bbe
-
SHA512
2b86c853d74f4751b49d27c519dd5d91b85f1eec84a246ac4bb8052b2ee804fb7332d9b65cddc1884ed5ed7808cea8d2e05e3159f10924df3b75e53dca80a440
-
SSDEEP
3072:EcRf03rpqLIOrJ4oRR0j6MIit2kneyHXAJSyCQwrOMXaXk3+7D1KFYs/aOLzixh:vqrpqL7b0t/nryi6kcPgaOLzO
Malware Config
Signatures
Files
-
e8a70ae30985f1cb55dc0deabf40d2146625012b4948df7e278f018323d49bbe.exe windows x86
27f65f15ea9eecf8e2e7bc4738cdac6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextMetricsA
GetTextExtentPointA
SelectObject
GetDeviceCaps
DeleteObject
CreateFontIndirectA
ole32
CoGetMalloc
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
kernel32
GetACP
GetCPInfoExA
QueryPerformanceCounter
GetThreadLocale
GetLocaleInfoA
SetHandleCount
EnterCriticalSection
LeaveCriticalSection
RaiseException
HeapSize
DeleteCriticalSection
GetTickCount
WideCharToMultiByte
GetVersionExA
GetLastError
FreeEnvironmentStringsW
TlsSetValue
EnumResourceNamesW
WriteFile
MultiByteToWideChar
InterlockedExchange
GetOEMCP
lstrlenW
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStringsW
TlsGetValue
GetEnvironmentStrings
RaiseException
InterlockedIncrement
GetCPInfo
GetStdHandle
UnhandledExceptionFilter
GetFileType
GetStartupInfoA
GetCurrentProcessId
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ