Static task
static1
Behavioral task
behavioral1
Sample
e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc.exe
Resource
win10v2004-20220901-en
General
-
Target
e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc
-
Size
1.0MB
-
MD5
648acaf3557c01b8ec2603c52fd9af0c
-
SHA1
8f17236309dc970e71a82e98350d13e251eb13c7
-
SHA256
e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc
-
SHA512
b5013ac6f3293f4e951c038509b42a2290061d468747e485a645a9c646d9f4d4a3e06e38489ffd927665cbf02fa00548e80ae2d73f2eced969db868666d494e4
-
SSDEEP
24576:o4ucYlzO2zKpppGjnaQWEwbSkbaomesgU1xDEnL95qd3W:XK/lW
Malware Config
Signatures
Files
-
e4e6b094d3df7cd59e4149a5590498f503569b7e67e6018653514a21b0857fbc.exe windows x86
c73073be662b66560e6a8908b0074c0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
WriteConsoleW
CreateFileW
CloseHandle
HeapReAlloc
HeapSize
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
DecodePointer
user32
UpdateWindow
PostQuitMessage
LoadCursorW
GetMessageW
DefWindowProcW
DestroyWindow
MessageBoxW
CreateWindowExW
RegisterClassExW
ShowWindow
DispatchMessageW
MessageBoxA
TranslateMessage
LoadIconW
ws2_32
select
wininet
InternetCheckConnectionA
Sections
.text Size: 778KB - Virtual size: 777KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ