Static task
static1
Behavioral task
behavioral1
Sample
e17eb86ac7f800c8667560ed83096d199d84cbd6334f5700375d6869f3de07ec.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e17eb86ac7f800c8667560ed83096d199d84cbd6334f5700375d6869f3de07ec.exe
Resource
win10v2004-20221111-en
General
-
Target
e17eb86ac7f800c8667560ed83096d199d84cbd6334f5700375d6869f3de07ec
-
Size
76KB
-
MD5
ef2e2cbd23348f908c15f04e097d7e1b
-
SHA1
c255a8278226cf5e1ca2eca8f4909d02b4f9f345
-
SHA256
e17eb86ac7f800c8667560ed83096d199d84cbd6334f5700375d6869f3de07ec
-
SHA512
774794b2dc6083ee817f637187647a97e8e3461dba1a13591b6b006666d1059cbda28349a72b769bd73b60a15465984cfeae9602ae62fc084798d72a08dd8865
-
SSDEEP
1536:Pi4qmpxgWWzRtEC0d8DhFekcfxIfpYJFx13KHfIpjVrs2ryrd1vUQuq6:rPgxLEBwcxIfpYjD6wHs2qo
Malware Config
Signatures
Files
-
e17eb86ac7f800c8667560ed83096d199d84cbd6334f5700375d6869f3de07ec.exe windows x86
7afae981b396d5a60080327759cf1adf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNativeSystemInfo
ContinueDebugEvent
OpenEventA
GetNextVDMCommand
DeleteAtom
GetThreadTimes
IsBadReadPtr
LoadLibraryExA
WriteTapemark
Module32Next
SetFileShortNameA
GetCurrentProcess
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE