Static task
static1
Behavioral task
behavioral1
Sample
e6f3d7b3ed190502893c21cddd9f946e34e45a2ade64dae99670f2a1c39453ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6f3d7b3ed190502893c21cddd9f946e34e45a2ade64dae99670f2a1c39453ec.exe
Resource
win10v2004-20220901-en
General
-
Target
e6f3d7b3ed190502893c21cddd9f946e34e45a2ade64dae99670f2a1c39453ec
-
Size
103KB
-
MD5
ad2cab6370968e58d4a397b8fe74f897
-
SHA1
fd498f497c02d0be0ddcc7a875bab9bcc59a52b7
-
SHA256
e6f3d7b3ed190502893c21cddd9f946e34e45a2ade64dae99670f2a1c39453ec
-
SHA512
4d0dcbc06a42129a65cf887f624715e2cbb2f055cc1561aabd3b132950c23666bd6d3e63ffd351e1499a88bd96bda8a27ad0d2a5380789eea812e9dc037387d8
-
SSDEEP
1536:hJ2pZqwWzn0Iaca1BXeyihtsGVmwCL92Ow8+wi9eU23YHWzTMRV1:3+brihtsEs96p+wWcn1
Malware Config
Signatures
Files
-
e6f3d7b3ed190502893c21cddd9f946e34e45a2ade64dae99670f2a1c39453ec.exe windows x86
151dd63bac8fcb2929e66d771ae73a9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetNumberFormatW
ResumeThread
HeapCreate
GetCurrentThreadId
EnumCalendarInfoW
GetModuleHandleA
EnterCriticalSection
GetModuleFileNameA
lstrlenW
GetPrivateProfileStringW
LocalFree
FindClose
TlsGetValue
GetDriveTypeW
ReadFile
GetConsoleAliasW
SetLastError
SetEvent
FindAtomW
user32
GetClassInfoA
DispatchMessageA
GetSysColor
CallWindowProcW
GetMenuInfo
SetFocus
GetKeyState
GetCursorInfo
GetClientRect
DispatchMessageA
IsWindow
GetKeyboardType
DrawTextA
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ