Static task
static1
Behavioral task
behavioral1
Sample
e940dc42f925e6e9edeebfb12ab8c23bf58fc56934abbde6bbbb4a224fad9f1e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e940dc42f925e6e9edeebfb12ab8c23bf58fc56934abbde6bbbb4a224fad9f1e.exe
Resource
win10v2004-20220901-en
General
-
Target
e940dc42f925e6e9edeebfb12ab8c23bf58fc56934abbde6bbbb4a224fad9f1e
-
Size
324KB
-
MD5
04b79b860340781b9deb97d3d582bdb0
-
SHA1
cfc1826b6e5a90299704e0026849112f1f6b91c7
-
SHA256
e940dc42f925e6e9edeebfb12ab8c23bf58fc56934abbde6bbbb4a224fad9f1e
-
SHA512
c46f4b350c936378711273ebd8541ba3509b7b57eaca3f46bfc4bdcf3adddd13c740ecf11f981a3ec04c8f0aa5024b0b492dd1567b6ec4f9596c104188aede6e
-
SSDEEP
6144:BF03f1XIQKW45g3C4xPS5eegJg5cKnn5B1G:j0v1YQV4594xPkem5hv1G
Malware Config
Signatures
Files
-
e940dc42f925e6e9edeebfb12ab8c23bf58fc56934abbde6bbbb4a224fad9f1e.exe windows x86
db9bc47974ee8f83fe44cb33a0fe088e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetNamedPipeInfo
GetThreadLocale
ReleaseSemaphore
CreateFileA
GetStdHandle
SetFilePointer
GetEnvironmentVariableA
user32
SendMessageA
Sections
zPiKIOYo Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
sCaHhEQK Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TuyFItjZ Size: 272KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE