Static task
static1
Behavioral task
behavioral1
Sample
e6f4ffa6bba90fce547a600f71b48ee432278f1089b2747986210d59438fd209.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6f4ffa6bba90fce547a600f71b48ee432278f1089b2747986210d59438fd209.exe
Resource
win10v2004-20221111-en
General
-
Target
e6f4ffa6bba90fce547a600f71b48ee432278f1089b2747986210d59438fd209
-
Size
963KB
-
MD5
0bbff630083d933ccba94ccce56f8e70
-
SHA1
5565a082af5df969eca71ac5205727975965a933
-
SHA256
e6f4ffa6bba90fce547a600f71b48ee432278f1089b2747986210d59438fd209
-
SHA512
00fa49f897b39898340bc4c93a456294ce8ce47b6b2c31b2fd2b26a1b47faffb5d5040958a914989212a086a7d8bc99f9bc8b519f730dd681cdfe28ad678b725
-
SSDEEP
12288:fZOU58SlsSliSlb6XVDU1I+4+5+by/y/y/y/y/y/y/yS5Z5Z5Z5Z5sy/y/y/yS56:fZOxSlsSliSlyglaaaaaaamaaaSaaaag
Malware Config
Signatures
Files
-
e6f4ffa6bba90fce547a600f71b48ee432278f1089b2747986210d59438fd209.exe windows x86
38c7ddda7d14716c59d59ee4a4ce377f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
user32
DialogBoxParamA
DlgDirListComboBoxA
DrawStateA
DrawTextA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 250B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE