Static task
static1
Behavioral task
behavioral1
Sample
e15889eca91d04138d66c70f11c5196d61742569a2eb52378b32944d16730c9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e15889eca91d04138d66c70f11c5196d61742569a2eb52378b32944d16730c9a.exe
Resource
win10v2004-20220812-en
General
-
Target
e15889eca91d04138d66c70f11c5196d61742569a2eb52378b32944d16730c9a
-
Size
202KB
-
MD5
fc825701deded61473d4360718f7b81e
-
SHA1
5406089c9f830e58b065e6ada43e6a185b1008bb
-
SHA256
e15889eca91d04138d66c70f11c5196d61742569a2eb52378b32944d16730c9a
-
SHA512
ba0e33a918e123577b2c23adeb8fb08e500c46bba4df01f0b86b64d33218118d522532b3ec538be1f938a8fb1c643028860541f605831bc80382cafc0267c264
-
SSDEEP
6144:EyXarUm+S28yFPmFFgQqAi5eDa69XdM4sXYuuviMyp:krUm328hFFLqA9a69XXvvUp
Malware Config
Signatures
Files
-
e15889eca91d04138d66c70f11c5196d61742569a2eb52378b32944d16730c9a.exe windows x86
ae79f625787bdfb4ace4557d321cf24e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetUserDefaultLCID
Sleep
CloseHandle
GetModuleHandleW
GetLastError
CreateFileMappingW
LoadLibraryA
LocalAlloc
FoldStringW
GetAtomNameW
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsGetValue
GetProcAddress
GetModuleHandleW
shell32
SHLimitInputEdit
SHGetFolderPathW
advapi32
RegQueryValueExW
RegSetValueExA
LsaICLookupNamesWithCreds
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ