Static task
static1
Behavioral task
behavioral1
Sample
e77e9bd28dfc320d36293519ee10631996af59ccb93bb220b15ea21eb925b812.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e77e9bd28dfc320d36293519ee10631996af59ccb93bb220b15ea21eb925b812.exe
Resource
win10v2004-20220901-en
General
-
Target
e77e9bd28dfc320d36293519ee10631996af59ccb93bb220b15ea21eb925b812
-
Size
128KB
-
MD5
18557ef30c2b6532c74712ca0c6b8d30
-
SHA1
219d4c24f6c3d412704bb88e6ee53ccc81cda412
-
SHA256
e77e9bd28dfc320d36293519ee10631996af59ccb93bb220b15ea21eb925b812
-
SHA512
91cf614334250cbd1955f2577e8c9992854e2b5effc787d2b79e9afe1f69f48d83728320330d21c17b7249a5a50309cea2b13c7f441a4c9aa5a42429b0a83f7b
-
SSDEEP
3072:EQ1m24hjpYg2C47wRHpv0rZS2jbxWGqt:EQQNbjJmwxAZSbGq
Malware Config
Signatures
Files
-
e77e9bd28dfc320d36293519ee10631996af59ccb93bb220b15ea21eb925b812.exe windows x86
dfc59cf5c9a1ae07c5078c7343efe353
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
CreateProcessW
DeleteFileW
ExpandEnvironmentStringsW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
CopyFileW
ReadFile
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
VirtualAllocEx
CreateFileA
QueryPerformanceCounter
CloseHandle
user32
LoadIconA
LoadCursorA
advapi32
RegOpenKeyExA
msvcrt
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_ltow
_wcslwr
_wfopen
_wfullpath
_wsplitpath
exit
fclose
floor
fwprintf
swprintf
wcsncpy
wcsstr
Sections
.text5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 691B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE