Static task
static1
Behavioral task
behavioral1
Sample
e0096121cda198b566e6ec11626f54555342f108c6cea7e3eb91d8b2d4d2b05c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e0096121cda198b566e6ec11626f54555342f108c6cea7e3eb91d8b2d4d2b05c.exe
Resource
win10v2004-20221111-en
General
-
Target
e0096121cda198b566e6ec11626f54555342f108c6cea7e3eb91d8b2d4d2b05c
-
Size
136KB
-
MD5
c93c71ff9e57756457b3a03585a48a87
-
SHA1
248e48483789c98e58f312d9a55ad8fa6d11df11
-
SHA256
e0096121cda198b566e6ec11626f54555342f108c6cea7e3eb91d8b2d4d2b05c
-
SHA512
a9d18c70cfe93eda7b45e341f153da03b7183802381fc6ebe00eb3620d28af0a5fd3e2f5b6ac2604cff8f93372508c8977bae59b9c1da731039a177508ab57c6
-
SSDEEP
3072:N58GVH5tEhRBr2HOaigW1957nFqihYqyrt12:N86w57nlmK
Malware Config
Signatures
Files
-
e0096121cda198b566e6ec11626f54555342f108c6cea7e3eb91d8b2d4d2b05c.exe windows x86
830f9224a0f77120d9efb3ccff27cc5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFiber
GetTapeParameters
LockResource
GetProcessTimes
LocalShrink
GetProcessIoCounters
TransmitCommChar
SetTapeParameters
GetFileSize
LocalUnlock
IsWow64Process
GetProcessHeap
EraseTape
GetCommTimeouts
GetCurrentProcess
PostQueuedCompletionStatus
ConvertThreadToFiber
CreateIoCompletionPort
GetCommandLineA
SetSystemTimeAdjustment
LocalCompact
CancelWaitableTimer
GetProcessId
EncodeSystemPointer
SetHandleCount
FindFirstFileExW
AssignProcessToJobObject
ClearCommBreak
GetModuleFileNameA
GetNumaNodeProcessorMask
WTSGetActiveConsoleSessionId
CreateJobSet
CreateFileMappingW
FlushInstructionCache
ReleaseSemaphore
ConvertFiberToThread
OpenProcess
ResetWriteWatch
IsProcessInJob
GetLogicalDrives
GetFileType
CreateTimerQueue
ReadFileScatter
SetProcessPriorityBoost
GetCommandLineW
EncodePointer
CreateFiberEx
PrepareTape
ClearCommError
GetProcessHandleCount
SetMailslotInfo
GetDevicePowerState
GetThreadPriority
GetFileTime
SetMessageWaitingIndicator
TlsGetValue
RtlCaptureStackBackTrace
InitAtomTable
GetLastError
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
InterlockedDecrement
GetCPInfo
GetVersionExA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedIncrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
OutputDebugStringA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
Sleep
InitializeCriticalSection
RtlUnwind
LoadLibraryExA
VirtualProtect
GetSystemInfo
VirtualQuery
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ