Static task
static1
Behavioral task
behavioral1
Sample
e008a6345de10f91607fa5c7eddc585149b62718790bc399021c95d5cae24dab.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e008a6345de10f91607fa5c7eddc585149b62718790bc399021c95d5cae24dab.exe
Resource
win10v2004-20220901-en
General
-
Target
e008a6345de10f91607fa5c7eddc585149b62718790bc399021c95d5cae24dab
-
Size
17KB
-
MD5
0ec5697a7189631fa3b54d1c8cdfc415
-
SHA1
03650ae2e754a79f31aeff6f3adaebc9ce38c54e
-
SHA256
e008a6345de10f91607fa5c7eddc585149b62718790bc399021c95d5cae24dab
-
SHA512
ed33d976724d9cb3f2278515a9930f28e402069e034ac052999f5dd65fa7dfe724d57c282b0833bfa4cf9fe5940d7651f2c8153bd12749ab3b52d44a09f22e3f
-
SSDEEP
192:dQHlPUyGQBEhbOypmVvK84k9Suzb0FmBhtQCLDYqa1AivJ0gl2TGxSniU9ymBqxv:dQLF0+5R4wHTCCLMqaqUOg0GxzDmk
Malware Config
Signatures
Files
-
e008a6345de10f91607fa5c7eddc585149b62718790bc399021c95d5cae24dab.exe windows x86
c3b50a66d3f6ddf0e27849f52a41bffc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
InterlockedIncrement
SetUnhandledExceptionFilter
SetEndOfFile
lstrcpyA
SetFilePointer
GetFileType
EnterCriticalSection
ReadFile
GetLastError
LeaveCriticalSection
GetCurrentDirectoryA
FindClose
InitializeCriticalSection
FindFirstFileA
LocalAlloc
CreateFileA
CloseHandle
FlushFileBuffers
IsBadWritePtr
LocalFree
WriteFile
FindNextFileA
DeleteCriticalSection
IsDebuggerPresent
ExitProcess
FormatMessageA
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
MessageBoxA
wsprintfA
ole32
CLSIDFromString
CoTaskMemRealloc
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
LoadTypeLi
LoadRegTypeLi
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ