Static task
static1
Behavioral task
behavioral1
Sample
e817d1e5e40282ae74120c4186cbefe289cad8ce5984a474346774762dd05bd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e817d1e5e40282ae74120c4186cbefe289cad8ce5984a474346774762dd05bd1.exe
Resource
win10v2004-20220812-en
General
-
Target
e817d1e5e40282ae74120c4186cbefe289cad8ce5984a474346774762dd05bd1
-
Size
298KB
-
MD5
126c57ae480c903221cfd61296f04822
-
SHA1
f1db612603ccc066c7119cca325934696179a5dd
-
SHA256
e817d1e5e40282ae74120c4186cbefe289cad8ce5984a474346774762dd05bd1
-
SHA512
e5a7983d03c87f1946714ea1416a1e66b717be3e05a8f813bf2a1ca918c42ba5b6b3b69f80c90dff50e97a64cba2eeb73185471f91e6f96d9e5bafa1b3112457
-
SSDEEP
6144:o+TkJzA4yRQKeAbvavsa8g0zUfKdjECJKUSg3/3OPvnBgU72f:jkJzAjRfbvavsxqYnJKUVUBg3f
Malware Config
Signatures
Files
-
e817d1e5e40282ae74120c4186cbefe289cad8ce5984a474346774762dd05bd1.exe windows x86
ef6962c63710b48fd730d56fd637e398
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
FindAtomA
GetNumberFormatA
LoadLibraryW
GetCurrentThreadId
SuspendThread
GetCurrentProcessId
TlsGetValue
GetPrivateProfileStringA
LocalFree
GetDriveTypeW
FindClose
LocalFlags
WriteFile
lstrlenW
GetConsoleAliasA
CreateEventW
GetEnvironmentVariableW
InitializeCriticalSection
HeapCreate
user32
GetClassInfoA
DrawTextA
CallWindowProcW
EndDialog
GetSysColor
GetSysColor
DrawStateW
IsWindow
GetClientRect
GetKeyboardType
DispatchMessageA
CreateWindowExA
SetFocus
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ