Static task
static1
Behavioral task
behavioral1
Sample
e1eb7d703ea453898a18251dbb19f1d32438742b4f3e96ad83bd734fbb78a185.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1eb7d703ea453898a18251dbb19f1d32438742b4f3e96ad83bd734fbb78a185.exe
Resource
win10v2004-20220901-en
General
-
Target
e1eb7d703ea453898a18251dbb19f1d32438742b4f3e96ad83bd734fbb78a185
-
Size
76KB
-
MD5
863d8b5490ff3d691e2ae8c33419bceb
-
SHA1
61fc988853ddf9ccd3d866b7e7824daf2e91a650
-
SHA256
e1eb7d703ea453898a18251dbb19f1d32438742b4f3e96ad83bd734fbb78a185
-
SHA512
d0cbc61dba83de1396cd5e3097fd4b67617f1b34a1a43fa28b888e4e789d091ec0e7e9bf869184554a0cf288c782405730b351d0534a1ea4ce1bcc946fca5535
-
SSDEEP
1536:u+LIeGkZexCL+3wXZ3uwDTV/D+cFtU0sZgcbYAbW6:uCIeRLZYwDThKF0sZgcbY
Malware Config
Signatures
Files
-
e1eb7d703ea453898a18251dbb19f1d32438742b4f3e96ad83bd734fbb78a185.exe windows x86
f8a36e0a92e3d853ba6a3f2b2931ac70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetVersionExA
lstrlenA
GetLocalTime
FreeLibrary
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapFree
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqlxmgk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE