Static task
static1
Behavioral task
behavioral1
Sample
e6f8e1479cd5e3d5dea73f1a5d80c881799a31a6fc0b4e84a13aba8c31fc9752.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e6f8e1479cd5e3d5dea73f1a5d80c881799a31a6fc0b4e84a13aba8c31fc9752.exe
Resource
win10v2004-20221111-en
General
-
Target
e6f8e1479cd5e3d5dea73f1a5d80c881799a31a6fc0b4e84a13aba8c31fc9752
-
Size
286KB
-
MD5
06cd1ddf9e4f1d788ed969e39f358e0b
-
SHA1
bd9e916a2d5d1d5599a1230463ebfb4fc3e8571f
-
SHA256
e6f8e1479cd5e3d5dea73f1a5d80c881799a31a6fc0b4e84a13aba8c31fc9752
-
SHA512
060365b9747bebc7a89aef7897441658c6d15064d0e2fc3574f81517e80297a0fe7f653023e24f59af384f44708ccc2da4ebc839065f2d577dee6ca02f222834
-
SSDEEP
6144:kqR91Wm4GywEi4oiwehXkcmrSlbK4bnxRZkBbH0DkqYr86T/gTn:k6/Wm42A474nZkBHodYo6T/4
Malware Config
Signatures
Files
-
e6f8e1479cd5e3d5dea73f1a5d80c881799a31a6fc0b4e84a13aba8c31fc9752.exe windows x86
e1ee449746f44e4b17b7c4b11446e27c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptReleaseContext
shlwapi
PathCombineW
PathRemoveFileSpecW
SHDeleteKeyA
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CharUpperW
CloseDesktop
DrawIcon
FindWindowExA
GetDlgItem
GetDlgItemTextA
GetForegroundWindow
GetKeyboardState
GetKeyState
GetWindowThreadProcessId
MsgWaitForMultipleObjects
PeekMessageA
SetThreadDesktop
ToUnicode
Sections
.dij Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lclqj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fqt Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ