Static task
static1
Behavioral task
behavioral1
Sample
e806462cc9b9083845225d415fbb779913b0748af1c77e8ab89c97507abb2c93.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e806462cc9b9083845225d415fbb779913b0748af1c77e8ab89c97507abb2c93.exe
Resource
win10v2004-20220812-en
General
-
Target
e806462cc9b9083845225d415fbb779913b0748af1c77e8ab89c97507abb2c93
-
Size
106KB
-
MD5
18629aaac6b8984593d1ced0ffb8fc10
-
SHA1
3fc5119bad166f278a359cb3d9d481824f079f3a
-
SHA256
e806462cc9b9083845225d415fbb779913b0748af1c77e8ab89c97507abb2c93
-
SHA512
8e94dbd9434b88df150303c0411a5be733269eef004eca3c0cbe0c5f6bf3e0555b97e47855673daaa59ec03484b08b1cd1fc3941a576faffc0afc52d7eb09877
-
SSDEEP
1536:eIeLZhSkE2kNt7bmAgMmL+aogkP/BIEM6TWe/+uQe3iIql89:eIe9It75sLVm5HM6TZNSIq29
Malware Config
Signatures
Files
-
e806462cc9b9083845225d415fbb779913b0748af1c77e8ab89c97507abb2c93.exe windows x86
da3686f00a4b466ccb574339c3160003
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
LoadLibraryA
HeapAlloc
HeapReAlloc
GetProcessHeap
GetTickCount
GetSystemTime
LockResource
SizeofResource
LoadResource
FindResourceA
GetSystemTimeAsFileTime
GetLastError
GetCommandLineA
HeapFree
GetVersionExA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ