Static task
static1
Behavioral task
behavioral1
Sample
e1a07e7ace795c3ac81811afdca0fa74bd50b6402135c51c84b8c973dfd153ae.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1a07e7ace795c3ac81811afdca0fa74bd50b6402135c51c84b8c973dfd153ae.exe
Resource
win10v2004-20220812-en
General
-
Target
e1a07e7ace795c3ac81811afdca0fa74bd50b6402135c51c84b8c973dfd153ae
-
Size
132KB
-
MD5
168673d767877736342a1353e8055870
-
SHA1
3105b9150340595fb211b848b477d138cec38a0a
-
SHA256
e1a07e7ace795c3ac81811afdca0fa74bd50b6402135c51c84b8c973dfd153ae
-
SHA512
1e7e16743365bc4dac294be5a22b4884d96e4d0f2f488b7f111d11dc60e74a3b659eddf059b57cb5f57572a53dda085fef1eb9eda820088d4bdd99abb8a81392
-
SSDEEP
3072:2YCguLq3pK11ImmYMwgqEOrALLNQ/4oeknwE3YV3:MguLq3eImmYzgyALU4oekne
Malware Config
Signatures
Files
-
e1a07e7ace795c3ac81811afdca0fa74bd50b6402135c51c84b8c973dfd153ae.exe windows x86
fbdc33c6e0d20ef038ef487bc22d3452
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
CreateMutexA
UnmapViewOfFile
MapViewOfFile
Sleep
CreateFileMappingA
GetSystemTime
SetFilePointer
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RegisterDeviceNotificationA
UnregisterDeviceNotification
RegisterClassExA
CreateWindowExA
PostQuitMessage
DefWindowProcA
ole32
CreateBindCtx
CoUninitialize
CoGetMalloc
CoCreateInstance
MkParseDisplayName
CoInitialize
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ua%�A� Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE