Static task
static1
Behavioral task
behavioral1
Sample
e9f1f5545ef6f227517305c8e6f3d24b313805042314a21818a654a33294afd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9f1f5545ef6f227517305c8e6f3d24b313805042314a21818a654a33294afd1.exe
Resource
win10v2004-20221111-en
General
-
Target
e9f1f5545ef6f227517305c8e6f3d24b313805042314a21818a654a33294afd1
-
Size
111KB
-
MD5
04a3ecc2c68cfb7d5fafe99a74086f25
-
SHA1
a7c2be563861dd514f422a88bfba685649ea6e38
-
SHA256
e9f1f5545ef6f227517305c8e6f3d24b313805042314a21818a654a33294afd1
-
SHA512
67cfd8f954c58900173b542f0f505cc4237057cef6712c394411e96e35256c529cce0484bbf87d585b49259f5d2a63533e017e93f420f84fda17e048009df61d
-
SSDEEP
1536:yWlTwpPmOV/qK3Yjakb3MV/fIvhzN/M5JLSn+0w56IcCC:yaMhms/Caisw/GJLS+ZsH
Malware Config
Signatures
Files
-
e9f1f5545ef6f227517305c8e6f3d24b313805042314a21818a654a33294afd1.exe windows x86
50b2e10f8a17ed25ae717f65d8710504
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
VirtualProtect
LoadResource
GetTempPathA
FreeEnvironmentStringsA
CompareStringA
GetDriveTypeA
GetLastError
CreateProcessW
GetVersionExA
FileTimeToSystemTime
SetFilePointer
GetCurrentThread
GetFullPathNameA
GetStartupInfoA
FreeEnvironmentStringsW
DeleteFileA
SetCurrentDirectoryA
GetVersion
RtlMoveMemory
GetThreadLocale
GetSystemDirectoryA
DeleteFileW
SizeofResource
MultiByteToWideChar
CreateProcessA
GetModuleHandleA
GetModuleHandleW
LocalFree
GetProcAddress
msvcrt
_controlfp
__p__commode
tan
__p__fmode
_except_handler3
_exit
_initterm
__p___initenv
__set_app_type
__getmainargs
_XcptFilter
_adjust_fdiv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ime Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ