Static task
static1
Behavioral task
behavioral1
Sample
e6d465efd7ad150b861cf24e17fcee0febcf8095e06a641bbc2d4fc0b459cc07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6d465efd7ad150b861cf24e17fcee0febcf8095e06a641bbc2d4fc0b459cc07.exe
Resource
win10v2004-20221111-en
General
-
Target
e6d465efd7ad150b861cf24e17fcee0febcf8095e06a641bbc2d4fc0b459cc07
-
Size
3.2MB
-
MD5
bf2095fd0ef6325979ca761511412508
-
SHA1
2c97540dbd1723c62a3ca01519568622bff8da4a
-
SHA256
e6d465efd7ad150b861cf24e17fcee0febcf8095e06a641bbc2d4fc0b459cc07
-
SHA512
764c09f103241c51f536a9f1b924bb0e5ad85cc9fbcd4f2c2cd0d63f1459210d16920eb60d68263ee724ccfc604906b4b19e741276b4142ae1fc0d6ce4833f57
-
SSDEEP
49152:XJCrZdKohokCOi3OtQB1xFBlHCqH15q/FvVdUAe88X:XerKzq2oQnxm3c88X
Malware Config
Signatures
Files
-
e6d465efd7ad150b861cf24e17fcee0febcf8095e06a641bbc2d4fc0b459cc07.exe windows x86
20568fc01f7a6a608452834f60ca9b01
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
EnumTimeFormatsA
GetComputerNameA
SetEndOfFile
WriteProcessMemory
GetNamedPipeHandleStateA
GetLogicalDriveStringsA
GetCurrentDirectoryA
VirtualAlloc
GetCommModemStatus
GetSystemDefaultLangID
GlobalDeleteAtom
HeapCompact
UnregisterWait
GlobalFindAtomA
PeekConsoleInputA
LoadLibraryA
WriteConsoleInputA
Module32Next
UnlockFile
SetConsoleIcon
ReleaseMutex
AddAtomW
d3d9
Direct3DCreate9
advapi32
CredDeleteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 499KB - Virtual size: 839KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 402KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ