Static task
static1
Behavioral task
behavioral1
Sample
e411f2a877028728c8e5796a34050e5df06318239dc08e47f93373c6a4ecd5b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e411f2a877028728c8e5796a34050e5df06318239dc08e47f93373c6a4ecd5b8.exe
Resource
win10v2004-20220812-en
General
-
Target
e411f2a877028728c8e5796a34050e5df06318239dc08e47f93373c6a4ecd5b8
-
Size
218KB
-
MD5
cdf69c16ce00ef0cfb6c2ac16260b75d
-
SHA1
f036c0dab9be08e728a4942f00913bdfeddf84a7
-
SHA256
e411f2a877028728c8e5796a34050e5df06318239dc08e47f93373c6a4ecd5b8
-
SHA512
af74c0a6ffe92175ea4be782315b1130698d00865abe96433c426bad939e35ad69a30e8ff33827afbcf41c76ec0029baeeed44abea599c3f525bb8cc6d3b24c7
-
SSDEEP
6144:q8RnXBH5Yi/UgvTnSR6OeHqmozj3vyuJ4y89n/k5h:fNXBHyi7zSRWqx36u3Gk5h
Malware Config
Signatures
Files
-
e411f2a877028728c8e5796a34050e5df06318239dc08e47f93373c6a4ecd5b8.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE