Static task
static1
Behavioral task
behavioral1
Sample
e68df2a42870b8a3ccc06ed4db35d76cafd9526e1fab9b4c84c18581d246d6b4.exe
Resource
win7-20220812-en
General
-
Target
e68df2a42870b8a3ccc06ed4db35d76cafd9526e1fab9b4c84c18581d246d6b4
-
Size
275KB
-
MD5
545b38eafee8e3ecfb2773dbb7903f18
-
SHA1
49908f34dc1adea79746c9ab3eb44381c8aac57b
-
SHA256
e68df2a42870b8a3ccc06ed4db35d76cafd9526e1fab9b4c84c18581d246d6b4
-
SHA512
79198cbd97b886723e7662d9b391b849d3adb9d362e20b803b48fdaa3ab23c4ec2403752e2df3347390af5ed736bd311c85cbda1308112d9f07d644efdb1a11f
-
SSDEEP
6144:p6rCtem7bPw041CWmrNaPd7ShlfUrJvI35M2f0rla:Km/4PmrfwAM2Ea
Malware Config
Signatures
Files
-
e68df2a42870b8a3ccc06ed4db35d76cafd9526e1fab9b4c84c18581d246d6b4.exe windows x86
e70a5f816d6a796519b2cc2fbd5fba00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlGetPartW
UrlCanonicalizeW
PathCombineW
UrlApplySchemeW
UrlCombineW
PathAppendW
msimg32
TransparentBlt
kernel32
HeapFree
GetACP
VirtualAlloc
WriteFile
GetOEMCP
GetCurrentProcess
GetCPInfo
SetUnhandledExceptionFilter
EnumResourceTypesW
GetStringTypeA
RtlUnwind
IsDebuggerPresent
InterlockedExchange
ResetWriteWatch
LCMapStringW
GetStringTypeW
LoadLibraryA
LCMapStringA
GetLocaleInfoA
wtsapi32
WTSUnRegisterSessionNotification
WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSFreeMemory
WTSRegisterSessionNotification
oleacc
LresultFromObject
AccessibleObjectFromEvent
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ