Static task
static1
Behavioral task
behavioral1
Sample
e4ca72f827777292ade912c01ce38238dd283973050ef4bd46f4eb1225898788.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4ca72f827777292ade912c01ce38238dd283973050ef4bd46f4eb1225898788.exe
Resource
win10v2004-20220812-en
General
-
Target
e4ca72f827777292ade912c01ce38238dd283973050ef4bd46f4eb1225898788
-
Size
581KB
-
MD5
2bfa106d5cbb701b3030151cdc2e6900
-
SHA1
caac5d2d3a92e70a59f8b4940fa52a5d3283ffc1
-
SHA256
e4ca72f827777292ade912c01ce38238dd283973050ef4bd46f4eb1225898788
-
SHA512
c933a2d3d81134e136f7cc11a2f14c15f85c0dfcab5331e7049d42bade35b85abe8ef8539f7f8a5ac62f64354367522c6a2aa2eb67dde68c732efdc140491556
-
SSDEEP
12288:RUUndSGMaoabZkgDV6gPbY3fDVWAeKq25SSwBWZ6lQANbraLVM0D0YD+o:RAmKUV6gsPD9fqgSKA1gb/+o
Malware Config
Signatures
Files
-
e4ca72f827777292ade912c01ce38238dd283973050ef4bd46f4eb1225898788.exe windows x86
03538f415eaddaeebbff5164d0e7ff35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
StartServiceA
user32
GetInputState
msvcrt
wcslen
ws2_32
ntohs
ntdll
RtlAnsiStringToUnicodeString
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs0 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs1 Size: - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bbs2 Size: 580KB - Virtual size: 579KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ