Static task
static1
Behavioral task
behavioral1
Sample
e6dbc604d49eb8f79a8056d808829d076cf114dddd203cc90b407760d8f3c90b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e6dbc604d49eb8f79a8056d808829d076cf114dddd203cc90b407760d8f3c90b.exe
Resource
win10v2004-20220901-en
General
-
Target
e6dbc604d49eb8f79a8056d808829d076cf114dddd203cc90b407760d8f3c90b
-
Size
164KB
-
MD5
3a86dc89dc0c1f698d7543e7641bdbdc
-
SHA1
d65cd81ed2749fa8548cd07c1e8b70794f24406d
-
SHA256
e6dbc604d49eb8f79a8056d808829d076cf114dddd203cc90b407760d8f3c90b
-
SHA512
b0a60ef88795495fef463abf04bfe29e1bd0567e31e09ea037e0b79fdf59fd5694e4058281bbf3cd94a4af808643b6fd450073a8cd029367239dcd4d669eec7c
-
SSDEEP
3072:Uxk2qwZ4TNrhFfI+UHHGBXfd0bgMwuwHjjfOkLUROYdW1sOnuI/K4h9ZQGgJP97h:gk1NTt/vagMwuWjfOkLkOIW1x48gl9F
Malware Config
Signatures
Files
-
e6dbc604d49eb8f79a8056d808829d076cf114dddd203cc90b407760d8f3c90b.exe windows x86
220d81e07f9a9f4b0b978500c38e59a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
user32
SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA
advapi32
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegEnumValueA
Sections
.text Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ