Static task
static1
Behavioral task
behavioral1
Sample
e826554a3fcadc99b3428af374b675d4ff78ce10cd2a1c6b399763eb6c6b0361.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e826554a3fcadc99b3428af374b675d4ff78ce10cd2a1c6b399763eb6c6b0361.exe
Resource
win10v2004-20220812-en
General
-
Target
e826554a3fcadc99b3428af374b675d4ff78ce10cd2a1c6b399763eb6c6b0361
-
Size
62KB
-
MD5
153e29ab28aa8deb98823852434d250d
-
SHA1
b14fdd304698c5416ffd98adc5b46729051e1de3
-
SHA256
e826554a3fcadc99b3428af374b675d4ff78ce10cd2a1c6b399763eb6c6b0361
-
SHA512
5a8b7d2ac63b9fce201dea5f39625eb9627d43a3dab6d8552e2bc9f20e63cc02ca83b18ade507ca4b3e28aaf8332abfa44e1c91ebbe9ef8b335e967eebe862b9
-
SSDEEP
768:JBKCzjZm+oKJk1rbn+Jyjw0Dl0GaXGd1avMq/6ELg/3C:JBH3sdn7j5tasmD3
Malware Config
Signatures
Files
-
e826554a3fcadc99b3428af374b675d4ff78ce10cd2a1c6b399763eb6c6b0361.exe windows x86
4143210abce1dea1d825feb54303a17c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DosDateTimeToFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetCurrentProcess
GetCurrentDirectoryW
GetSystemInfo
GetACP
InitializeCriticalSection
CreateEventA
GetLastError
CreateMutexA
WaitForSingleObject
SetEvent
GetTickCount
FreeLibrary
GetVersionExA
MultiByteToWideChar
GetProcessHeap
GetProcAddress
softpub
OfficeCleanupPolicy
DllUnregisterServer
GenericChainFinalProv
dpnaddr
DirectPlay8AddressCreate
Sections
.icode Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aH Size: 5KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ZAEV Size: 512B - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bzhlST Size: 4KB - Virtual size: 817KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wa Size: 5KB - Virtual size: 897KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 9KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Q Size: 5KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ