Static task
static1
Behavioral task
behavioral1
Sample
e29e0042cfc77e9aa7dfbb3914392ed6b2b573dcf799c4595dae995b41c41c09.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e29e0042cfc77e9aa7dfbb3914392ed6b2b573dcf799c4595dae995b41c41c09.exe
Resource
win10v2004-20221111-en
General
-
Target
e29e0042cfc77e9aa7dfbb3914392ed6b2b573dcf799c4595dae995b41c41c09
-
Size
975KB
-
MD5
1bc8f24633e4a0c09f4b4942814dff20
-
SHA1
59b4bdd1d54d0d7a7c46f0e2c63c627d80f8b13b
-
SHA256
e29e0042cfc77e9aa7dfbb3914392ed6b2b573dcf799c4595dae995b41c41c09
-
SHA512
ef464ee3382e920de704c64d2c6b6f51e915de76de8d4362e7c02acd3047e45b2ee1e8a96dd39fb611435ad0ed31b401438544fd8ded4a62cf711051ad6ac501
-
SSDEEP
12288:/ogxm0I5127QTmR68LdUa+6WZu80Mruorz5b8xDpccT/q4ULyyscsgmS0pU2Awh4:/fx97QCR68Lma8J50JTfwmcXSUWG0fhQ
Malware Config
Signatures
Files
-
e29e0042cfc77e9aa7dfbb3914392ed6b2b573dcf799c4595dae995b41c41c09.exe windows x86
67e108c13a05b2978799ec37406519d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
GetModuleHandleW
GetCurrentThread
VirtualFree
WriteFile
VirtualAlloc
IsWow64Process
user32
MessageBoxA
GetGuiResources
Sections
.text Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 386B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ