Static task
static1
Behavioral task
behavioral1
Sample
e6c3d73189b76c70e7c59f3bbacbfef632e228c2cc8b47ecf85dfdfef6c69271.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e6c3d73189b76c70e7c59f3bbacbfef632e228c2cc8b47ecf85dfdfef6c69271.exe
Resource
win10v2004-20220812-en
General
-
Target
e6c3d73189b76c70e7c59f3bbacbfef632e228c2cc8b47ecf85dfdfef6c69271
-
Size
233KB
-
MD5
28802b46a04a5af291573a96cac3318d
-
SHA1
dfeaebea8f9bc9ba2b717b53e929fff20c4be71e
-
SHA256
e6c3d73189b76c70e7c59f3bbacbfef632e228c2cc8b47ecf85dfdfef6c69271
-
SHA512
18c4ea5c765511da63ff9db3ccc1c1afe8a02f4a3905bd5735b3df17d27d298ea282c2bb869b9108596a74c01b035f638a7d9efa9b43e112b16ea097ed77a039
-
SSDEEP
6144:bhczSK0xst01yWrWfZFykIn/dTTl+nqQp6SCDNYnrHB:Gzpm1ZSfZFWVQcSfnDB
Malware Config
Signatures
Files
-
e6c3d73189b76c70e7c59f3bbacbfef632e228c2cc8b47ecf85dfdfef6c69271.exe windows x86
51137af3357dcacaaa9403f95144ce86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ResetEvent
SetLastError
HeapCreate
ReleaseMutex
CreateFileA
HeapSize
AddAtomA
CreateMutexW
GetEnvironmentVariableA
DeleteFileA
GetFileSize
SuspendThread
GetTickCount
SetEndOfFile
FindClose
InitializeCriticalSection
HeapDestroy
GetTickCount
GetModuleHandleA
ExitProcess
GetStartupInfoW
GetProfileIntW
GetCurrentDirectoryA
WaitForSingleObject
shell32
SHGetSettings
SHFree
DragQueryFileA
ExtractIconA
DragAcceptFiles
DragFinish
DuplicateIcon
ShellMessageBoxA
SHGetDiskFreeSpaceA
DllUnregisterServer
ShellAboutA
SHGetMalloc
StrChrA
dpmodemx
SPInit
SPInit
SPInit
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ