Static task
static1
Behavioral task
behavioral1
Sample
e94410c90937d9f8ed6d39f3ce22be109d68304396347602f4ef3fd40c4cac92.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e94410c90937d9f8ed6d39f3ce22be109d68304396347602f4ef3fd40c4cac92.exe
Resource
win10v2004-20221111-en
General
-
Target
e94410c90937d9f8ed6d39f3ce22be109d68304396347602f4ef3fd40c4cac92
-
Size
124KB
-
MD5
b851976abf0fc28ec44472d509049511
-
SHA1
837d910143bbcc867560a786429fcbcd0cbdc904
-
SHA256
e94410c90937d9f8ed6d39f3ce22be109d68304396347602f4ef3fd40c4cac92
-
SHA512
036b3923e823efdbaee4029f86b97f50316f5d2d026c06bb59a1eb41d331ad9981edb3f9071fc75862b6551912167a359b2dc4288a13f2bc45031d7147b461da
-
SSDEEP
1536:Gh/9yU7LUa8wMRbX+3RsHziTIaFkU7ehFPtcfXk2I9DR4K4ibbBz+4aQ:Gh/9yUEa8wMU3Rqi3eU7qFP7ZvbBK4aQ
Malware Config
Signatures
Files
-
e94410c90937d9f8ed6d39f3ce22be109d68304396347602f4ef3fd40c4cac92.exe windows x86
680e52b7cc9111c92db1dd666d358f90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
WriteConsoleOutputA
GetThreadLocale
SetConsoleCursorPosition
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
SetConsoleCursorInfo
lstrcpyA
lstrcatA
LoadLibraryA
GetModuleHandleA
FindResourceA
GetLocaleInfoA
LockResource
GetProcAddress
VirtualAlloc
GetCurrentProcess
LoadResource
SizeofResource
CloseHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
GetKeyboardState
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 261KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ