Static task
static1
Behavioral task
behavioral1
Sample
e691b71148edb81627eb645caf972a9722864c91b90228d68b06ea6ea9038696.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e691b71148edb81627eb645caf972a9722864c91b90228d68b06ea6ea9038696.exe
Resource
win10v2004-20221111-en
General
-
Target
e691b71148edb81627eb645caf972a9722864c91b90228d68b06ea6ea9038696
-
Size
100KB
-
MD5
fc087d5bb95487b4328d089da59f5b54
-
SHA1
7232452a42656c2eb648e243c60467508928857b
-
SHA256
e691b71148edb81627eb645caf972a9722864c91b90228d68b06ea6ea9038696
-
SHA512
51b4d32abd642cb3a6ad92a3f59f362ffb6ff6fb56781b34872f3ec31df665ab73e4f7fa80d0ec267bbc5cf7e4dda9708fe52375c90d37b58809051018c9458a
-
SSDEEP
3072:/KUfiawaE3AmaioLj5VlrUyQxF8yPFqCHc:fiDaE3gLRrqv8W
Malware Config
Signatures
Files
-
e691b71148edb81627eb645caf972a9722864c91b90228d68b06ea6ea9038696.exe windows x86
7848c00e9f068fabeb86c45ad29fab09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
_onexit
strstr
__p__commode
__getmainargs
_initterm
exit
strchr
_adjust_fdiv
fflush
calloc
__p__fmode
_errno
strncmp
_exit
free
_acmdln
__setusermatherr
_snprintf
strcmp
__set_app_type
kernel32
CompareStringA
GlobalReAlloc
ReadFile
LoadLibraryExW
GetStringTypeA
GetSystemTimeAsFileTime
GetLastError
GetProcAddress
SetFileTime
GetUserDefaultLangID
CompareStringW
GetTempFileNameA
GetStartupInfoA
DuplicateHandle
WriteFile
GetCommandLineW
SetStdHandle
GlobalUnlock
FreeLibrary
oleaut32
SysStringLen
VariantCopyInd
GetErrorInfo
VariantCopy
SafeArrayCreate
user32
DrawFrameControl
SetCapture
InsertMenuA
InvalidateRect
GetForegroundWindow
EndPaint
GetFocus
DrawTextA
UnhookWindowsHookEx
FillRect
IsWindow
DispatchMessageA
IsIconic
advapi32
RegEnumKeyW
GetSecurityDescriptorDacl
QueryServiceStatus
CloseServiceHandle
RegCloseKey
OpenServiceW
RegDeleteValueW
AdjustTokenPrivileges
RegSetValueExA
RegOpenKeyExW
OpenProcessToken
CryptGenRandom
CryptHashData
RegEnumValueA
InitializeAcl
RegEnumKeyExW
comctl32
ImageList_DrawEx
DestroyPropertySheetPage
ImageList_SetDragCursorImage
ImageList_DragLeave
CreateStatusWindowA
CreatePropertySheetPageW
ImageList_GetIconSize
ImageList_Draw
InitCommonControls
ImageList_GetImageCount
ImageList_Write
ole32
OleSetMenuDescriptor
RevokeDragDrop
ProgIDFromCLSID
DoDragDrop
IIDFromString
CLSIDFromProgID
IsEqualGUID
OleGetClipboard
CoGetInterfaceAndReleaseStream
CoRevokeClassObject
PropVariantClear
OleDraw
StgOpenStorageOnILockBytes
gdi32
EnumMetaFile
Escape
GetObjectW
TranslateCharsetInfo
SetDIBits
CreatePen
SelectPalette
GetDIBColorTable
CreateEllipticRgn
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ