Static task
static1
Behavioral task
behavioral1
Sample
e20e6b4478041e6f3a04f03d0693a53f1f9882dccf43d40fa1b498ec325f239a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e20e6b4478041e6f3a04f03d0693a53f1f9882dccf43d40fa1b498ec325f239a.exe
Resource
win10v2004-20221111-en
General
-
Target
e20e6b4478041e6f3a04f03d0693a53f1f9882dccf43d40fa1b498ec325f239a
-
Size
319KB
-
MD5
3cf056805513c2a66f8f04fd04d87cc3
-
SHA1
134f780012b579e3a11910fe4ae44ed60195698f
-
SHA256
e20e6b4478041e6f3a04f03d0693a53f1f9882dccf43d40fa1b498ec325f239a
-
SHA512
752815e0dbac55b791476785ec2d9ecff6df84c76f3cb80ed06e64dfb97b25aacfa792ae2f8ae2b4caeb6c597ab00faac1dde110d043f3c05eb8adbe050bc61a
-
SSDEEP
6144:wL15/HAuhhfwFcia8UR4quzpuCSa8LOHHha6phow+MU+WKaPO8avHeaTC:wrBh4Fcia8U2qu4CH8LOHBLphwMxSfaI
Malware Config
Signatures
Files
-
e20e6b4478041e6f3a04f03d0693a53f1f9882dccf43d40fa1b498ec325f239a.exe windows x86
c130a2a20d4971a6eef1840a6164aca0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateTokenEx
ImpersonateLoggedOnUser
RegOpenCurrentUser
Sections
0 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4Q3l3 Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ