Static task
static1
Behavioral task
behavioral1
Sample
e1e0a5c901542275a3b0ffd0c0b9b18eb6f8b899971a3b5bcf8b74c169b429a1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1e0a5c901542275a3b0ffd0c0b9b18eb6f8b899971a3b5bcf8b74c169b429a1.exe
Resource
win10v2004-20220812-en
General
-
Target
e1e0a5c901542275a3b0ffd0c0b9b18eb6f8b899971a3b5bcf8b74c169b429a1
-
Size
162KB
-
MD5
c7f7fb6bc36d612ad7da5d7700efd48b
-
SHA1
831262bd929915aa2343e9b76a8cffe997d1fc76
-
SHA256
e1e0a5c901542275a3b0ffd0c0b9b18eb6f8b899971a3b5bcf8b74c169b429a1
-
SHA512
60955ccd56593fb2b26d55a50df91d1e8fc6d3d0e5f47982217f906637746c97a74d40cbd188f46655d0a30247405e07802c078d6b9645c39e1a959be595e44e
-
SSDEEP
768:Cqsw7Mzgv4BnhpGnS0BXAV8Jbdd/wU8gsQIh6pcoEQm83QCNOkQIh3ndo:lw8gBnDzOwV8h3wU6QGA5Em37Mu3n
Malware Config
Signatures
Files
-
e1e0a5c901542275a3b0ffd0c0b9b18eb6f8b899971a3b5bcf8b74c169b429a1.exe windows x86
d4973f11c0b38c6681e55b05b1f266fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetProcAddress
HeapReAlloc
lstrlenW
HeapReAlloc
GetACP
GetCurrentProcessId
ReadFile
GetCurrentProcessId
SetLastError
HeapDestroy
DeleteCriticalSection
GetCurrentProcess
HeapDestroy
lstrcpyW
lstrcpyW
GetModuleHandleW
ReadFile
GetStartupInfoW
GetCommandLineA
CreateThread
CreateFileW
GetACP
GetLastError
SetLastError
GetACP
FormatMessageW
EnterCriticalSection
WaitForSingleObject
GetCommandLineW
InterlockedIncrement
ReadFile
MultiByteToWideChar
GetLastError
GetCommandLineW
QueryPerformanceCounter
user32
GetDC
UpdateWindow
MoveWindow
GetSystemMetrics
ReleaseCapture
MapWindowPoints
DispatchMessageW
Sections
Size: 143KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ