Static task
static1
Behavioral task
behavioral1
Sample
e37f26a38911e098dc0adf1a15011aeb7947134b81c025160a6508d928a7d432.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e37f26a38911e098dc0adf1a15011aeb7947134b81c025160a6508d928a7d432.exe
Resource
win10v2004-20220812-en
General
-
Target
e37f26a38911e098dc0adf1a15011aeb7947134b81c025160a6508d928a7d432
-
Size
18KB
-
MD5
4609002b1374c05eabba1f5b040c2395
-
SHA1
620c75192de46bef5506cec166e919f6ea943349
-
SHA256
e37f26a38911e098dc0adf1a15011aeb7947134b81c025160a6508d928a7d432
-
SHA512
23c5a6fba8909ce265eb29961bf75c46f8893298f12fae44d18997c96e4e770a5859f013396eaa43cc382983e0d3deed3efd00cae900bf31f7a8c0cfe75848f0
-
SSDEEP
384:aE8dxGzWNuqNcvbfLnDk5y+Z3S+k0OULNzckDIrFkWekas//NC:aE8dxGc6bfk93/xZLhckcZkyTNC
Malware Config
Signatures
Files
-
e37f26a38911e098dc0adf1a15011aeb7947134b81c025160a6508d928a7d432.exe windows x86
5cac8f3022793d56b45821016f66fece
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
lstrcmpA
SetErrorMode
lstrcpynA
QueryPerformanceCounter
GetFullPathNameA
CloseHandle
IsBadCodePtr
ExitProcess
GetSystemInfo
FormatMessageA
ReadFile
VirtualAlloc
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetStringTypeA
TerminateProcess
lstrcmpW
lstrlenA
lstrcatA
GetLastError
GetFileSize
CreateFileA
LocalFree
IsDebuggerPresent
user32
MessageBoxA
SetTimer
GetSystemMetrics
wsprintfA
KillTimer
advapi32
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
ole32
CoUninitialize
CoTaskMemRealloc
CoInitialize
CoCreateInstance
StringFromGUID2
CLSIDFromString
oleaut32
LoadTypeLi
LoadRegTypeLi
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ