Static task
static1
Behavioral task
behavioral1
Sample
e36b81d08c9f3f3f74e5defc709b57624b3f515379edaf3839299fce70567ea7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e36b81d08c9f3f3f74e5defc709b57624b3f515379edaf3839299fce70567ea7.exe
Resource
win10v2004-20220812-en
General
-
Target
e36b81d08c9f3f3f74e5defc709b57624b3f515379edaf3839299fce70567ea7
-
Size
17KB
-
MD5
8fdc2207b8c1c550920975c5b248117d
-
SHA1
0a1da34df3d850867b8531cd22c4bee610020cd0
-
SHA256
e36b81d08c9f3f3f74e5defc709b57624b3f515379edaf3839299fce70567ea7
-
SHA512
e9808281fed92e05e17382c7fbc0ef2f0a8dd96906cbe241889e5cfd4826f46d1a65719166ea81e9b9ccfc7d451690628069c3d7d16694d564f772b9871b5c3f
-
SSDEEP
384:TZHL3g4KmbXBK/HDDzlgC35WjDhwjOKFNhzrUjrR:T9NKmbxmHDDhpCDhwjOMhforR
Malware Config
Signatures
Files
-
e36b81d08c9f3f3f74e5defc709b57624b3f515379edaf3839299fce70567ea7.exe windows x86
b30901b1005a544a205eb143516848b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
RemoveDirectoryW
ReleaseSemaphore
CreateHardLinkA
CreateDirectoryW
GetTickCount
FatalExit
LoadLibraryA
HeapDestroy
VirtualProtect
RemoveDirectoryW
SetLastError
ReleaseSemaphore
ReadConsoleA
CreateMutexA
GetStdHandle
GetVersion
GetFileSize
CreateFileA
HeapSize
MapViewOfFile
DeleteFileW
ReleaseMutex
SetLastError
GetStartupInfoA
uxtheme
GetThemeTextExtent
IsThemeActive
DrawThemeEdge
GetThemeSysSize
CloseThemeData
GetThemeBool
GetThemeTextMetrics
GetWindowTheme
CloseThemeData
GetThemeColor
SetWindowTheme
OpenThemeData
DrawThemeBackground
msports
ComDBOpen
ComDBReleasePort
ComDBClose
ComDBClaimPort
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE