Static task
static1
Behavioral task
behavioral1
Sample
e4c8c08a4b3f791016130e2ca3f55011bc10132d7bbf33513402c294777e6802.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4c8c08a4b3f791016130e2ca3f55011bc10132d7bbf33513402c294777e6802.exe
Resource
win10v2004-20221111-en
General
-
Target
e4c8c08a4b3f791016130e2ca3f55011bc10132d7bbf33513402c294777e6802
-
Size
43KB
-
MD5
e300914379a2068ae2ce14e0d33d64a2
-
SHA1
542efeefbd173fe4930eceb427fde349d35dee7c
-
SHA256
e4c8c08a4b3f791016130e2ca3f55011bc10132d7bbf33513402c294777e6802
-
SHA512
eb1bab5fa0e0ae0e9dea86631efb9ae051abb65a1db0c5de4bb97b83084fbee81e4630d7a18c4c56508599d91eb0352688e529a2852856ddbccfa5f8e929b024
-
SSDEEP
384:icaMToooN/Wme2qxy+mC6VNwUKtRQw0YV:icYi2UmHVNw0wjV
Malware Config
Signatures
Files
-
e4c8c08a4b3f791016130e2ca3f55011bc10132d7bbf33513402c294777e6802.exe windows x86
a8158c643b94b46e32e077d2310db9a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
WriteConsoleW
ReleaseMutex
RemoveDirectoryA
CreateFileA
GetTickCount
ResetEvent
SetStdHandle
ReleaseSemaphore
FindClose
CreateFileMappingW
GetFileType
RemoveDirectoryA
DeleteFileA
GetCommandLineA
GetDriveTypeA
CreateMutexA
GetModuleHandleA
OpenEventW
lstrlenA
VirtualProtectEx
HeapFree
WriteFile
FindClose
Beep
user32
FindWindowA
GetWindowLongA
DestroyMenu
DrawTextW
DestroyMenu
GetClassInfoA
MessageBoxA
DispatchMessageA
GetSysColor
CreateIcon
PeekMessageA
IsZoomed
IsWindow
dmutil
DisplayError
DisplayError
DisplayError
DisplayError
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ