Static task
static1
Behavioral task
behavioral1
Sample
e030561ce5f832749d10d9c279edf21ef5e3006c48726bea7b2fd6b31c8eaf96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e030561ce5f832749d10d9c279edf21ef5e3006c48726bea7b2fd6b31c8eaf96.exe
Resource
win10v2004-20220812-en
General
-
Target
e030561ce5f832749d10d9c279edf21ef5e3006c48726bea7b2fd6b31c8eaf96
-
Size
631KB
-
MD5
72c8f7ef40f24dacd0a5e7593e096ee2
-
SHA1
bc9d1027a5bd917224a2b095bd7d1e4bfa48dd05
-
SHA256
e030561ce5f832749d10d9c279edf21ef5e3006c48726bea7b2fd6b31c8eaf96
-
SHA512
ddbf8d90d7ae30b6f958ecd8c9fbf4c223dfc6fd4ea255b667a5729c75bb1b20dd88430dee5ce291be5e3394a31189e688926105ae661d643a7d83a0fe141466
-
SSDEEP
12288:qA2K69CRwC4bhP5QsxMs3r/TJcBcBcBcBcBcBcBccRcBc:qA2KHvabRxJD9+++++++z+
Malware Config
Signatures
Files
-
e030561ce5f832749d10d9c279edf21ef5e3006c48726bea7b2fd6b31c8eaf96.exe windows x86
e863ab1dc926cca99518b13ef7943e3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
UpdateWindow
DefWindowProcA
KillTimer
PostQuitMessage
kernel32
GetVersionExA
LCMapStringW
LCMapStringA
LeaveCriticalSection
SetCurrentDirectoryA
GetCurrentThreadId
CreateFileA
GetFileType
IsDebuggerPresent
FindClose
CreateProcessW
GlobalAlloc
FindResourceW
LoadResource
InitializeCriticalSection
GetVersion
WriteConsoleA
CreateProcessA
TerminateProcess
FreeLibrary
GetModuleHandleW
HeapReAlloc
GetACP
FindFirstFileW
GetSystemTimeAsFileTime
CloseHandle
SetUnhandledExceptionFilter
InterlockedExchange
ReadFile
GetModuleHandleA
TlsFree
FreeEnvironmentStringsA
RaiseException
UnhandledExceptionFilter
LockResource
GetCurrentProcessId
GetLocaleInfoA
GetCurrentProcess
VirtualFree
LoadLibraryA
VirtualQuery
GetModuleFileNameA
TlsAlloc
HeapAlloc
HeapDestroy
GetOEMCP
GetConsoleOutputCP
EnterCriticalSection
GetStdHandle
HeapFree
GetLastError
GetProcessHeap
VirtualAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcAddress
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
TlsSetValue
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapCreate
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
GetCPInfo
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 578KB - Virtual size: 579KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE