Static task
static1
Behavioral task
behavioral1
Sample
e4a764c5ba439bba266f3fcb178e1ea83c3956255c254b70d2db8b2edc0ab628.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4a764c5ba439bba266f3fcb178e1ea83c3956255c254b70d2db8b2edc0ab628.exe
Resource
win10v2004-20221111-en
General
-
Target
e4a764c5ba439bba266f3fcb178e1ea83c3956255c254b70d2db8b2edc0ab628
-
Size
80KB
-
MD5
1338b3c29f374ae4693a66a2b06f126b
-
SHA1
71d8cfdaf91e34dd88059fb5b16f6c4c37e1af7e
-
SHA256
e4a764c5ba439bba266f3fcb178e1ea83c3956255c254b70d2db8b2edc0ab628
-
SHA512
f148fdeb8d2e788d53fb25fafd50f65a69f3a9c543f6936caf69adf0d203cef6b69b1419ffb8a6486a853d0c82a8256c7776b879a2dabf68cd52adcfc0bf03d2
-
SSDEEP
1536:35YZd+3K9pNBLei18e4s5FHEUvO8OPjL1wamjgit3jpVAw8L8hn:h3atgsgz8OrLJmjTtN2DL8hn
Malware Config
Signatures
Files
-
e4a764c5ba439bba266f3fcb178e1ea83c3956255c254b70d2db8b2edc0ab628.exe windows x86
e9a0825e39da80d475c782fdf331b4f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
lstrlenW
GetEnvironmentVariableW
GetConsoleAliasA
ReadFile
HeapCreate
ResumeThread
LocalFlags
FindAtomA
FindClose
TlsGetValue
InitializeCriticalSection
SuspendThread
GetCurrentThreadId
LoadLibraryW
GetDriveTypeW
CreateEventW
LocalFree
GetNumberFormatA
GetPrivateProfileStringA
user32
SetFocus
GetSysColor
DrawTextA
GetKeyboardType
GetSysColor
DispatchMessageA
EndDialog
GetClientRect
IsWindow
CallWindowProcW
CreateWindowExA
DrawStateW
GetClassInfoA
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ