Static task
static1
Behavioral task
behavioral1
Sample
e0c9679691bc31433764a735d5513b3332435aa34f95598a6a7716620376eba1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e0c9679691bc31433764a735d5513b3332435aa34f95598a6a7716620376eba1.exe
Resource
win10v2004-20221111-en
General
-
Target
e0c9679691bc31433764a735d5513b3332435aa34f95598a6a7716620376eba1
-
Size
197KB
-
MD5
601ecd7a86b55d24ef1eadbfe4739e10
-
SHA1
0127c16510752edc5291d06493d20884305100cb
-
SHA256
e0c9679691bc31433764a735d5513b3332435aa34f95598a6a7716620376eba1
-
SHA512
fe0320fe484be77d14631fa30658416d4472ed988f9627d5d42af8f4a607dd1246fbd496325ebbd9e8dc6a84fabcb4fdc165cd3786334cf06859403e3ac46c4e
-
SSDEEP
6144:YX5uh9dAf1qhH+8ieKAdOKyT3VvQxZr1N13CVyCXpQxlU:S4XAiQTh0Z5N1y/ZoU
Malware Config
Signatures
Files
-
e0c9679691bc31433764a735d5513b3332435aa34f95598a6a7716620376eba1.exe windows x86
89501d8faaec9c45de23a8738b11fee8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 46KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GFDSERT Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE