Static task
static1
Behavioral task
behavioral1
Sample
e35b8bd8bc6d68b85a5402419d188cd42ac7ca1e560ab99496a3dfa1c9ff022e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e35b8bd8bc6d68b85a5402419d188cd42ac7ca1e560ab99496a3dfa1c9ff022e.exe
Resource
win10v2004-20220812-en
General
-
Target
e35b8bd8bc6d68b85a5402419d188cd42ac7ca1e560ab99496a3dfa1c9ff022e
-
Size
506KB
-
MD5
170a4c1336962d7b5c9065b5cd444d18
-
SHA1
965a14b8fed2137516c8c77f409ae1ce3d560dcc
-
SHA256
e35b8bd8bc6d68b85a5402419d188cd42ac7ca1e560ab99496a3dfa1c9ff022e
-
SHA512
7674a763c9c99d6b95a7464aa431fc07c5bdcaa582323eb1c6cf95bdd1998263bb5a6d48200a40751897bac809a3d701cd1b0ff13624fcc224256bebdd3823cf
-
SSDEEP
6144:uAi3o+k1w7ZkYpwTE+75GDfBnZ8PibR+1iFzKsGJinfeVq5JL5JiT2s2cGE/wB:Ji3ov67zpe1MfBnOP3lsGnqnL5g2lH
Malware Config
Signatures
Files
-
e35b8bd8bc6d68b85a5402419d188cd42ac7ca1e560ab99496a3dfa1c9ff022e.exe windows x86
d8e2a7329a2e1b5caba127650d28394a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
comctl32
_TrackMouseEvent
psapi
GetModuleFileNameExW
version
GetFileVersionInfoW
msimg32
AlphaBlend
user32
EqualRect
gdi32
GetStockObject
comdlg32
GetSaveFileNameW
advapi32
RegDeleteKeyW
shell32
SHGetPathFromIDListW
ole32
CoCreateInstance
oleaut32
SysAllocString
Sections
.data Size: 249KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 249KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE