Static task
static1
Behavioral task
behavioral1
Sample
e9b50d66ce5f899853ffd719bf206a4a291e399f33c8ef76bd0c0c093e06c052.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e9b50d66ce5f899853ffd719bf206a4a291e399f33c8ef76bd0c0c093e06c052.exe
Resource
win10v2004-20220812-en
General
-
Target
e9b50d66ce5f899853ffd719bf206a4a291e399f33c8ef76bd0c0c093e06c052
-
Size
61KB
-
MD5
7d9bc37376857c8910b15b13a647d097
-
SHA1
e1fbfd32a34cbac6bebd7feb35d9dfe6bbd38179
-
SHA256
e9b50d66ce5f899853ffd719bf206a4a291e399f33c8ef76bd0c0c093e06c052
-
SHA512
5d2598f7ad1302bee7e66e9cc78ba5d45e135a8c381d02130c2003f83094026b0ea878a45a848fdd298b6ef38689b0fc5e6933139ac1ffec98824556df3107e4
-
SSDEEP
1536:K8IAWlZY/0DWZ2v2HM7a3l32CV+XCQiRz7ix:YAWk8VWsC32CV0yk
Malware Config
Signatures
Files
-
e9b50d66ce5f899853ffd719bf206a4a291e399f33c8ef76bd0c0c093e06c052.exe windows x86
88c4d7708f091c42d9cc2669e968e798
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotW
EnumerateLocalComputerNamesA
GetComputerNameExA
MoveFileExA
GetVolumePathNameW
OutputDebugStringW
InterlockedDecrement
EnumResourceNamesA
GetBinaryTypeA
SetConsoleCursorPosition
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE