Static task
static1
Behavioral task
behavioral1
Sample
e1d7341a3c808d5737505926d4303dfdd31d523a5872abe367916ec17cb9df74.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1d7341a3c808d5737505926d4303dfdd31d523a5872abe367916ec17cb9df74.exe
Resource
win10v2004-20220812-en
General
-
Target
e1d7341a3c808d5737505926d4303dfdd31d523a5872abe367916ec17cb9df74
-
Size
25KB
-
MD5
b39473f27f1bfaba36ea9698188273b7
-
SHA1
660aa09d2f2ac2e7f7caf9a6855d7957dea20841
-
SHA256
e1d7341a3c808d5737505926d4303dfdd31d523a5872abe367916ec17cb9df74
-
SHA512
7ec8ba1f9b159518f813e5030c12f8ff9891828785889105a7938c8505be8af5624c591af83b48ab1fad03747dd1e28e3743af7298b2fff288e98fe319c17136
-
SSDEEP
384:pc67m5zdDv7cx3N0OIZt9hPTKEPJNJJVX5iUo9VB77J2Uy87gkNBYX1qku:pF8dDv60Zt9hLR5e7F2UP7gUoqr
Malware Config
Signatures
Files
-
e1d7341a3c808d5737505926d4303dfdd31d523a5872abe367916ec17cb9df74.exe windows x86
dbc21871698b41fa85d020d07aebb313
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadImageA
LoadIconA
GetWindowTextA
GetWindowLongA
GetSubMenu
LoadMenuA
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
LookupIconIdFromDirectoryEx
MessageBoxA
SetWindowLongA
SendMessageA
SetWindowPos
SetWindowTextA
TrackPopupMenu
GetDlgItem
DialogBoxParamA
DestroyIcon
CreateWindowExA
CreateIconFromResourceEx
wsprintfA
kernel32
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
SizeofResource
SetFilePointer
ReadFile
LockResource
LocalFree
LoadResource
LoadLibraryExA
GlobalFree
GlobalAlloc
GetVersionExA
GetModuleHandleA
GetModuleFileNameA
GetFileSize
GetFileAttributesA
CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
FreeLibrary
shlwapi
StrRChrA
StrDupA
StrStrIA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
InitCommonControlsEx
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.decrypt Size: 172B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE