Static task
static1
Behavioral task
behavioral1
Sample
e5f11ab561a96c68eefbfb707f2e159e4ed534a0a7e82ab19f220360181ee1ae.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e5f11ab561a96c68eefbfb707f2e159e4ed534a0a7e82ab19f220360181ee1ae.exe
Resource
win10v2004-20221111-en
General
-
Target
e5f11ab561a96c68eefbfb707f2e159e4ed534a0a7e82ab19f220360181ee1ae
-
Size
346KB
-
MD5
bbdca7cd66c43f3b89f5255f6a7b08ff
-
SHA1
8b34aae7871b5e2bc0ef8ef044d69ef54f5925a5
-
SHA256
e5f11ab561a96c68eefbfb707f2e159e4ed534a0a7e82ab19f220360181ee1ae
-
SHA512
3e7e79eed805628103849bfdde62eae2e111c9e5144abd200e36e6850e272c3a4c0dbae90d16039e4316307f57079a553f24f9efe59c427a79f337893bae02b8
-
SSDEEP
6144:LYqMoJatvPRr4xOas95wpwSNEYvONDGUjgpazIDCsg1Wng+N9u7Q16KQVXhwwjeY:LYsJatvPJv5YcBDGQRAiWJguihwwje4R
Malware Config
Signatures
Files
-
e5f11ab561a96c68eefbfb707f2e159e4ed534a0a7e82ab19f220360181ee1ae.exe windows x86
47d1e9eb0f670536d300f7c65c9285f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
MsiCloseHandle
dbghelp
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFromAddr
SymFromName
SymFunctionTableAccess
SymGetFileLineOffsets64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
kernel32
GetSystemTime
GetACP
GetSystemDirectoryA
GetVersionExA
PeekConsoleInputA
EnumCalendarInfoW
CallNamedPipeW
_lread
CreateFileA
rasapi32
RasFreeEapUserIdentityW
RasGetAutodialAddressA
RasGetAutodialAddressW
RasGetAutodialEnableA
Sections
.code Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC Size: 336KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r3 Size: - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ