Static task
static1
Behavioral task
behavioral1
Sample
e9568b0e98bfcc1940168bd8c3e4629f3efab9b636182ebd068f5d97e0506118.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9568b0e98bfcc1940168bd8c3e4629f3efab9b636182ebd068f5d97e0506118.exe
Resource
win10v2004-20220812-en
General
-
Target
e9568b0e98bfcc1940168bd8c3e4629f3efab9b636182ebd068f5d97e0506118
-
Size
124KB
-
MD5
5a345bf465c5896c56f41bc794cd423c
-
SHA1
b5208312ff6ee55150c24b0f82abcdf93710cdfb
-
SHA256
e9568b0e98bfcc1940168bd8c3e4629f3efab9b636182ebd068f5d97e0506118
-
SHA512
dec1142497c9bb42b2de9b2cf9a63c3f1abbd9a13cdb46b4122afde1f092d6759424072070e7ff386f4a44426842ec60db39246681615da51f27211ee61e6507
-
SSDEEP
3072:Eo1M6EoryGN4gWUsACMTd8NnfoXDshXkNhzdefT199vNfVIEZq:Eb6uK4gWSDh8Nn+u+zuT19JRq
Malware Config
Signatures
Files
-
e9568b0e98bfcc1940168bd8c3e4629f3efab9b636182ebd068f5d97e0506118.exe windows x86
5083b635c0689c33f4f5e209d586ae07
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptReleaseContext
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
shlwapi
PathFileExistsW
PathFindFileNameW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfW
user32
ExitWindowsEx
GetCursorPos
GetIconInfo
GetWindowThreadProcessId
OpenWindowStationA
SetMenuItemInfoW
SetThreadDesktop
Sections
.yrax Size: 42KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gdehel Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rot Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ