Static task
static1
Behavioral task
behavioral1
Sample
e485be9e7c8b44ff761f281d18200277969fab06d869ad51a3cb22689a72379c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e485be9e7c8b44ff761f281d18200277969fab06d869ad51a3cb22689a72379c.exe
Resource
win10v2004-20220812-en
General
-
Target
e485be9e7c8b44ff761f281d18200277969fab06d869ad51a3cb22689a72379c
-
Size
635KB
-
MD5
77b151d92630b3872c86ddf98cefb036
-
SHA1
9e3c4952080b7334d98bc219147797a267dad112
-
SHA256
e485be9e7c8b44ff761f281d18200277969fab06d869ad51a3cb22689a72379c
-
SHA512
ae259a28007b81a688b28ac0e908367343c4fcaa774bb539e2cb89662d98d559e9d94663f550fe81d9e8bc2c4a836593ecaa87680114ec61ad983d7c05abfa0f
-
SSDEEP
12288:je7Waih3OI/W097eAHhP2fMXuWdCzWpKsLALqoRxvfIUl7okzJSjWEA:je7Li0I/iqhP+6ujzVqkvwa8kVQWEA
Malware Config
Signatures
Files
-
e485be9e7c8b44ff761f281d18200277969fab06d869ad51a3cb22689a72379c.exe windows x86
d0a0936714dbae60642eac04eb6a0d54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
RaiseException
FlushFileBuffers
LoadLibraryExA
GetCommandLineA
GetStdHandle
FreeEnvironmentStringsA
SetEvent
GetCurrentProcess
HeapCreate
GetCurrentProcessId
GetCompressedFileSizeA
GetSystemDirectoryA
InterlockedExchange
GlobalFree
GetLocaleInfoA
ReadConsoleA
VirtualProtect
GetACP
GetCurrentThread
IsDebuggerPresent
user32
GetFocus
IsIconic
GetParent
GetClassNameA
FillRect
SetForegroundWindow
ShowWindow
BeginPaint
GetDlgItem
GetWindowTextA
FrameRect
ValidateRgn
SetActiveWindow
EndPaint
GetWindow
DrawTextA
ReleaseDC
GetCursorPos
wsprintfA
crypt32
CertFindAttribute
CertDuplicateStore
CertControlStore
CertCloseStore
CertCreateContext
apphelp
ApphelpCheckIME
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ