Static task
static1
Behavioral task
behavioral1
Sample
e139cd917b35b297d9b792d1db929fc857425e93c891a219a5897628aa3f0944.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e139cd917b35b297d9b792d1db929fc857425e93c891a219a5897628aa3f0944.exe
Resource
win10v2004-20220812-en
General
-
Target
e139cd917b35b297d9b792d1db929fc857425e93c891a219a5897628aa3f0944
-
Size
1.6MB
-
MD5
de64563086cb73c9aa387eb8effef7bf
-
SHA1
5c79a610fa65fd5b4fd711b04585916f6a7d2036
-
SHA256
e139cd917b35b297d9b792d1db929fc857425e93c891a219a5897628aa3f0944
-
SHA512
95f6f8873a2c88027392841c7780c5b2f66da66945540db1f8f02fe12c7d8d78a594a4179762f14a2c0cfa57de73460638be5a4c2d1bd35d0904ba86cd35fdb0
-
SSDEEP
24576:NMbE/zQ65KbOlzg+RnBXvPVCAlunHrqrC1ZyiECSSFb6KL4Gwg6H6ocbQ+:N+rbWvUmuLqKL4GwgOUZ
Malware Config
Signatures
Files
-
e139cd917b35b297d9b792d1db929fc857425e93c891a219a5897628aa3f0944.exe windows x86
0c30802d02380bf19e3bdfffdaa18b61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
IsWindowVisible
advapi32
RegQueryValueExA
shell32
SHGetFolderPathW
Sections
.text Size: 492KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ