Static task
static1
Behavioral task
behavioral1
Sample
e13eae00174e3ca28b016f5b5444744cfa175c122d7fed495d43e131f1a5e1dc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e13eae00174e3ca28b016f5b5444744cfa175c122d7fed495d43e131f1a5e1dc.exe
Resource
win10v2004-20221111-en
General
-
Target
e13eae00174e3ca28b016f5b5444744cfa175c122d7fed495d43e131f1a5e1dc
-
Size
144KB
-
MD5
9e89e7fcb38a23d3164fc42d46bf6442
-
SHA1
8cfe879aea0594588e4d8ae31dd7ce89db116a9e
-
SHA256
e13eae00174e3ca28b016f5b5444744cfa175c122d7fed495d43e131f1a5e1dc
-
SHA512
05c3a3eb0086df7307376cc9e407d1bc0e2ae271f6573c7afce144c700f050230f8f1e2b68098f3b578b344660c90b08f02a33fe5bbfd9edf252fe998e4ac7d3
-
SSDEEP
3072:cshfQcbZTtU/Nm4q2Ldqqq5EkM7V+3fRqa4Fh2Hzba1YUnPZwHb:rtbZ74q8zq5ERGZqa4yHoK
Malware Config
Signatures
Files
-
e13eae00174e3ca28b016f5b5444744cfa175c122d7fed495d43e131f1a5e1dc.exe windows x86
d9af17eb2e6b079e739b89fc36cc24d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
floor
ceil
strlen
realloc
__p__iob
free
_fileno
_setmode
malloc
calloc
fread
ferror
fseek
ftell
_fstat
feof
fclose
fopen
qsort
memmove
fprintf
_CIlog
frexp
memchr
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
CloseHandle
WideCharToMultiByte
WriteFile
SetFilePointer
HeapReAlloc
CreateFileA
ReadFile
user32
CallWindowProcA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE