Static task
static1
Behavioral task
behavioral1
Sample
e1f78156c4c64fb7b282189c51edb663e2c42263391dc05ae3a773d28f9e6e1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1f78156c4c64fb7b282189c51edb663e2c42263391dc05ae3a773d28f9e6e1e.exe
Resource
win10v2004-20220901-en
General
-
Target
e1f78156c4c64fb7b282189c51edb663e2c42263391dc05ae3a773d28f9e6e1e
-
Size
166KB
-
MD5
c233dd878c782617774ea114ef2b3e74
-
SHA1
76340a70307a26de57b592bf941f32476b1eb090
-
SHA256
e1f78156c4c64fb7b282189c51edb663e2c42263391dc05ae3a773d28f9e6e1e
-
SHA512
8bd34d3561416de844c42bbd9cce081e6e35bd7c92bcaa01fe3478e66c9402a724e0c19ac3bd5ddda3a10ae3faf10370c0c1cfee447acc1620266fe579e9b411
-
SSDEEP
3072:SJEEnhLAvmMtJO+LDdhJ9YsEsKNRu9ziIJH9dRQsV8A:v2hs7JLLxr4U17dyse
Malware Config
Signatures
Files
-
e1f78156c4c64fb7b282189c51edb663e2c42263391dc05ae3a773d28f9e6e1e.exe windows x86
a170146aae3dd46f8fc39bae9fd66d3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcessId
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
AllowSetForegroundWindow
msvcrt
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__fmode
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
__setusermatherr
__p__commode
__set_app_type
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE