Static task
static1
Behavioral task
behavioral1
Sample
e8dc745b3c70a79a67bde98a5add3fd1fbe52533e2e5e2df34fb2e2f1b394cc4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e8dc745b3c70a79a67bde98a5add3fd1fbe52533e2e5e2df34fb2e2f1b394cc4.exe
Resource
win10v2004-20221111-en
General
-
Target
e8dc745b3c70a79a67bde98a5add3fd1fbe52533e2e5e2df34fb2e2f1b394cc4
-
Size
11.4MB
-
MD5
a870f7198df656ec496dbdb6803ee884
-
SHA1
0dab7649daac31d65b04eacd8b2617c7ca2212c6
-
SHA256
e8dc745b3c70a79a67bde98a5add3fd1fbe52533e2e5e2df34fb2e2f1b394cc4
-
SHA512
ee082c527aa046d710a05b76167fafcda7a95260d5bb942ae085f0672cd4756646ca17b761edff6db41865c7a57896b006e8987950b5c6bf2327f0b742e8c9f7
-
SSDEEP
196608:t/JzS1mq9PNPWqJ/3LeIQcEbxjoCuPSanObG6JNcFqrrW4ne09X8IFy9VyKhJxA/:9JAmq9VPWDVcE1joa86JNcFArdB9X8d8
Malware Config
Signatures
Files
-
e8dc745b3c70a79a67bde98a5add3fd1fbe52533e2e5e2df34fb2e2f1b394cc4.exe windows x86
e070b9677425a65ad12a0c4dd16cb0c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
WriteFile
RtlUnwind
ReadFile
DeleteCriticalSection
GetSystemTimeAsFileTime
GetTickCount
InterlockedIncrement
UnmapViewOfFile
CreateFileW
GetCurrentThread
lstrlenA
GetModuleFileNameA
GetCurrentThreadId
GetOEMCP
lstrcpyA
LCMapStringW
GetCurrentProcessId
CloseHandle
MultiByteToWideChar
user32
GetDesktopWindow
PostMessageA
SendMessageW
DefWindowProcA
ReleaseDC
TranslateMessage
GetParent
EndDialog
LoadStringA
IsWindowVisible
PostThreadMessageW
GetClientRect
LoadImageW
GetForegroundWindow
SetForegroundWindow
gdi32
SetROP2
CreateMetaFileW
CreateCompatibleDC
CreateRectRgnIndirect
CombineRgn
SetRectRgn
DeleteMetaFile
advapi32
SetSecurityDescriptorGroup
CryptDestroyHash
CryptSetHashParam
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ