Static task
static1
Behavioral task
behavioral1
Sample
e5bd90e5bfcbeb8de3a17045bb981ad74f1e253263bb26eed1ba140326cb71a0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e5bd90e5bfcbeb8de3a17045bb981ad74f1e253263bb26eed1ba140326cb71a0.exe
Resource
win10v2004-20221111-en
General
-
Target
e5bd90e5bfcbeb8de3a17045bb981ad74f1e253263bb26eed1ba140326cb71a0
-
Size
495KB
-
MD5
04fcac53c2ee736d1ab4b89bc2ce05a0
-
SHA1
1cf0a1d73451245d271eace3c280499ebe616f94
-
SHA256
e5bd90e5bfcbeb8de3a17045bb981ad74f1e253263bb26eed1ba140326cb71a0
-
SHA512
17a7fd30f657929bd4e7756d07fe55749ca9449a177e0a933e62f90081e3ba4feb5aeeb9b545df7c2df89e928e81e6d375a69ade29eb9a16df769e275f62686d
-
SSDEEP
12288:eWIU4UzpDJLbArJuEz+Wj9aiMmvXLYLbZyz:hz2daN7Y7+4
Malware Config
Signatures
Files
-
e5bd90e5bfcbeb8de3a17045bb981ad74f1e253263bb26eed1ba140326cb71a0.exe windows x86
1d68ddda8f9eaf6cb22e86d11f3fff93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
GetBinaryTypeA
GetLogicalDrives
SetLastError
lstrcatW
GetStdHandle
lstrcmpiA
CreateWaitableTimerW
GetModuleHandleA
GetExitCodeProcess
lstrcmpiA
GetPrivateProfileStringA
lstrcmpiA
CreateNamedPipeA
EndUpdateResourceA
lstrcmpiA
Sleep
lstrcmpiA
FileTimeToLocalFileTime
GetTickCount
GetDriveTypeA
HeapCreate
TlsFree
ntmarta
AccConvertAccessToSD
EventNameFree
EventGuidToName
AccFreeIndexArray
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 488KB - Virtual size: 1016KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ