Static task
static1
Behavioral task
behavioral1
Sample
e227e7bd188b7df82a89cf799136ea37d5bb4696cc902f41ef5c014f304bc0c2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e227e7bd188b7df82a89cf799136ea37d5bb4696cc902f41ef5c014f304bc0c2.exe
Resource
win10v2004-20220812-en
General
-
Target
e227e7bd188b7df82a89cf799136ea37d5bb4696cc902f41ef5c014f304bc0c2
-
Size
140KB
-
MD5
27c649fb5445cd0ee7f5a7fe41a6c740
-
SHA1
24498b3f7bff26569799307603f4f2c8944f2cb2
-
SHA256
e227e7bd188b7df82a89cf799136ea37d5bb4696cc902f41ef5c014f304bc0c2
-
SHA512
54fa9b798b54677191080e28852866e2897dcb059e1645bd710fde584e1be688ad4a5ed764af48aec743875d5f5075bed67ce15d53cecb3bb4b8c40fb2021346
-
SSDEEP
3072:PkP7h/oMvoMelvwh0iF4s4ancTiYIwBa39sPNw:MPN/qMeJwi2Z6TatsPNw
Malware Config
Signatures
Files
-
e227e7bd188b7df82a89cf799136ea37d5bb4696cc902f41ef5c014f304bc0c2.exe windows x86
719455ede6dfb8f60400ff23313d9806
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
crtdll
__GetMainArgs
exit
raise
signal
gdi32
CreateSolidBrush
BitBlt
SelectObject
DeleteObject
SetTextColor
CreateCompatibleDC
DeleteDC
CreateFontIndirectW
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
user32
LoadIconW
GetWindowRect
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 322B - Virtual size: 322B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc1 Size: 302B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE