Static task
static1
Behavioral task
behavioral1
Sample
e8f472bc8afd22c620fb05a5cf359df00c0fea4ea71d9f274aa68ec979f03180.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e8f472bc8afd22c620fb05a5cf359df00c0fea4ea71d9f274aa68ec979f03180.exe
Resource
win10v2004-20221111-en
General
-
Target
e8f472bc8afd22c620fb05a5cf359df00c0fea4ea71d9f274aa68ec979f03180
-
Size
309KB
-
MD5
733be15cdc9cc3a30b2de9d57f5d06d0
-
SHA1
45b260898ae9229ffd1ffd9d648278535618c152
-
SHA256
e8f472bc8afd22c620fb05a5cf359df00c0fea4ea71d9f274aa68ec979f03180
-
SHA512
804146e7f50ed91f59f88b04eb2b9d4170f1b4c0a76b8ce3b69bc05d686165051009744772b2d0355cb75f7cdffc194bbd8d8b9a2a45c8d882bba7aba85ac7bd
-
SSDEEP
6144:C+JHoMOyUAw+Xt0PiVgVsK+oIFuqttzyXEyerC+YbuA1e:C+0lAFX6awsGYthyUyerCVSAe
Malware Config
Signatures
Files
-
e8f472bc8afd22c620fb05a5cf359df00c0fea4ea71d9f274aa68ec979f03180.exe windows x86
4065c0ec47e2e4a1e58059680c286204
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
Heap32First
lstrcpyW
GetPrivateProfileSectionA
GetModuleHandleW
GetStringTypeW
GetExitCodeProcess
GetCurrentDirectoryA
WriteFileEx
WaitForSingleObject
SetEnvironmentVariableA
LoadLibraryA
GetDiskFreeSpaceW
lstrcmpA
GetPrivateProfileIntA
InterlockedIncrement
FindResourceW
GetLongPathNameA
InterlockedDecrement
GetPrivateProfileIntA
ExitProcess
GetDiskFreeSpaceW
VirtualAllocEx
apphelp
SdbCreateMsiTransformFile
ApphelpCheckExe
ApphelpCheckIME
AllowPermLayer
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE