Static task
static1
Behavioral task
behavioral1
Sample
e589e1a8aff9da88838a2c9647259e08f777704b2dfb8d9b9cac19e7804f21b9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e589e1a8aff9da88838a2c9647259e08f777704b2dfb8d9b9cac19e7804f21b9.exe
Resource
win10v2004-20220901-en
General
-
Target
e589e1a8aff9da88838a2c9647259e08f777704b2dfb8d9b9cac19e7804f21b9
-
Size
76KB
-
MD5
4ba8ea1e15c4b649303afebdd5061d3e
-
SHA1
40d1d323a10cc505223b08de78302a1b2ddaaa83
-
SHA256
e589e1a8aff9da88838a2c9647259e08f777704b2dfb8d9b9cac19e7804f21b9
-
SHA512
e22aee1eceb05bc5e1cdc0d6eac215590d32c2b303f0f9fbd32a781c6b3bf339ad4261e2019cf33281a47f2c60fd44031b824ba8d22144f7ddb1dcf40ebdafaa
-
SSDEEP
1536:3ST9kI+VKpNmz03s4u6VljkV8HzoCuzspjVrs2ryrd1vUQuq6:C6KpyaBU8JHs2qo
Malware Config
Signatures
Files
-
e589e1a8aff9da88838a2c9647259e08f777704b2dfb8d9b9cac19e7804f21b9.exe windows x86
a8d08f82bb426c3685a003f0dd96b7f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleKeyShortcuts
FindVolumeMountPointClose
GetCommandLineW
EnumSystemCodePagesW
OpenWaitableTimerW
DisableThreadLibraryCalls
SetConsoleInputExeNameA
RequestDeviceWakeup
GetWriteWatch
InterlockedCompareExchange
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE