Static task
static1
Behavioral task
behavioral1
Sample
e2e250b15378c61a41fdb9450dc56fe1c579e32d8b0aa04683e172b5a6e734ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2e250b15378c61a41fdb9450dc56fe1c579e32d8b0aa04683e172b5a6e734ca.exe
Resource
win10v2004-20220901-en
General
-
Target
e2e250b15378c61a41fdb9450dc56fe1c579e32d8b0aa04683e172b5a6e734ca
-
Size
162KB
-
MD5
cd7e053721638e65e7f4291f48a4a92b
-
SHA1
e47d29fcbf73e7d6e02134343c856cceabef7b59
-
SHA256
e2e250b15378c61a41fdb9450dc56fe1c579e32d8b0aa04683e172b5a6e734ca
-
SHA512
5e6c1133271746e952cd05becbf5229168fb3d97470fe2b46ef2370368bd5d26f6da1c63b3ad1d04015ba29fe97b783c696893ed5060ca78d09495de09f9bf09
-
SSDEEP
1536:rtHMtr4p1cFGNDBp4s2DhK6dAsAXf2+uykU:rtH44pOF+1p50lAsGMykU
Malware Config
Signatures
Files
-
e2e250b15378c61a41fdb9450dc56fe1c579e32d8b0aa04683e172b5a6e734ca.exe windows x86
85b912cbf2569439dbd286a80147c4f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExW
InitializeSecurityDescriptor
RegOpenKeyW
RegEnumValueW
RegSetValueExW
RegEnumKeyExW
GetLengthSid
RegQueryValueExW
AdjustTokenPrivileges
AllocateAndInitializeSid
FreeSid
AllocateAndInitializeSid
OpenThreadToken
RegOpenKeyExA
RegCreateKeyExA
InitializeAcl
RegOpenKeyW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExA
AddAccessAllowedAce
OpenThreadToken
RegDeleteValueW
InitializeAcl
user32
SetCursor
SetCapture
TranslateMessage
GetWindowLongW
wsprintfW
CreateDialogParamW
LoadIconW
GetDC
PostQuitMessage
CreateDialogParamW
GetParent
RegisterClassW
MessageBoxA
DispatchMessageA
UpdateWindow
KillTimer
GetSubMenu
TranslateMessage
LoadStringW
GetCursorPos
kernel32
FreeLibrary
LocalAlloc
CreateFileW
GetStartupInfoW
GetCurrentProcess
VirtualFree
HeapDestroy
CreateThread
GetModuleHandleA
GetModuleHandleA
FreeLibrary
Sections
Size: 148KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�vmp0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
�reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
�reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE