Static task
static1
Behavioral task
behavioral1
Sample
e2d43680fb9a1b80d35672dc9f567d24c9824185fd73ca83f9ad7bed45bbfab3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2d43680fb9a1b80d35672dc9f567d24c9824185fd73ca83f9ad7bed45bbfab3.exe
Resource
win10v2004-20220812-en
General
-
Target
e2d43680fb9a1b80d35672dc9f567d24c9824185fd73ca83f9ad7bed45bbfab3
-
Size
119KB
-
MD5
6815cb7302f3916b700a9504c40a6af6
-
SHA1
3789686ba5b59b0591ae94b9934840afe9915dac
-
SHA256
e2d43680fb9a1b80d35672dc9f567d24c9824185fd73ca83f9ad7bed45bbfab3
-
SHA512
0ccbe6c0bbb24e9c7995b1965bbd87ada51822aefcfce9a72bf1a431aed4a2d7f8700c8229f7077d0ae35be75a9d7b01398793afb271410d5d85a676c498ec06
-
SSDEEP
1536:6qvRdcUL789UVjeAtuH4jELESeUGHL81w4d62betfP8apjVrs2ryrd1vUQuqSSqx:6+dJwKeeFbvUw4AfjHs2qxnC
Malware Config
Signatures
Files
-
e2d43680fb9a1b80d35672dc9f567d24c9824185fd73ca83f9ad7bed45bbfab3.exe windows x86
73a935ec22f7f6e1a5c38567a2971262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeW
_lwrite
CreateMutexA
GetConsoleCharType
VDMConsoleOperation
UnlockFileEx
RestoreLastError
ZombifyActCtx
SetCPGlobal
GetUserDefaultLangID
VDMOperationStarted
GetSystemDirectoryW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE