Static task
static1
Behavioral task
behavioral1
Sample
1e377a1330e1fb922caf0894974116fb29ac8f3f1ca58ffac324cff39eb61d5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e377a1330e1fb922caf0894974116fb29ac8f3f1ca58ffac324cff39eb61d5e.exe
Resource
win10v2004-20220812-en
General
-
Target
1e377a1330e1fb922caf0894974116fb29ac8f3f1ca58ffac324cff39eb61d5e
-
Size
304KB
-
MD5
2fd3d554f60a5ffb7e247c406dacf070
-
SHA1
f3d8d7595fdfb4946d3b83f48f3d976bf1e4b9c1
-
SHA256
1e377a1330e1fb922caf0894974116fb29ac8f3f1ca58ffac324cff39eb61d5e
-
SHA512
1375b0fd478577ba20841a77c31d15b0ef79142bb512a5461eb45c295a4631befb43ed316a170969078f2516570ec43473f2e887de05dc73a9ebe45f6a284af2
-
SSDEEP
6144:mHQ8/3233pTWs55zM0xsC6OcKml15L5JjjfkT46I6KR9kdKAd:o/323zvtgj15bkT4c9
Malware Config
Signatures
Files
-
1e377a1330e1fb922caf0894974116fb29ac8f3f1ca58ffac324cff39eb61d5e.exe windows x86
cd46f31bd00d119b3de66cec20c10e93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
VirtualProtectEx
IsValidCodePage
GetStringTypeA
GetVersionExA
SetLastError
HeapFree
GetPrivateProfileSectionA
CreateEventA
GetFileAttributesW
LocalFlags
GetModuleHandleA
GetCurrentProcess
FindClose
CreateDirectoryW
GlobalLock
GetCurrentThread
GetExitCodeThread
RemoveDirectoryW
GetFileAttributesW
GetLocaleInfoW
user32
DispatchMessageA
GetWindowLongW
LoadCursorA
IsWindow
GetWindowTextW
SetCursorPos
DefDlgProcA
SetCursor
PeekMessageW
SetFocus
IsDialogMessageA
PostMessageW
wsprintfW
msdtcprx
DTC_XaStart
DTC_XaEnd
DTC_XaOpen
DTC_XaCommit
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE