Static task
static1
Behavioral task
behavioral1
Sample
e4a0e761a6259f3155f86ab7929bb2f5ede03f7a877a5cf5b78e22414db6b5e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4a0e761a6259f3155f86ab7929bb2f5ede03f7a877a5cf5b78e22414db6b5e3.exe
Resource
win10v2004-20220812-en
General
-
Target
e4a0e761a6259f3155f86ab7929bb2f5ede03f7a877a5cf5b78e22414db6b5e3
-
Size
168KB
-
MD5
5e8e1cd42f49ed3531e1abc8c1c9e4fb
-
SHA1
e917de89b26cb96fe2c3f31f583941bee8badecb
-
SHA256
e4a0e761a6259f3155f86ab7929bb2f5ede03f7a877a5cf5b78e22414db6b5e3
-
SHA512
ceabcf98d0270d2c9d94b00047ee01b748357d69e80421ee099b234c95806254dfecc2d0ae84986e319ace2b28b3861ecf65bcb393be867b1eeaba4b49705a7f
-
SSDEEP
3072:CANZBwj7SdZ/xirgdMZVZsQ4PpMNX1Vt8vUzjVSOEUp6UzFuPFprgsnoFNLkliVv:CANIfSr/ArgUVf4ipWvUoC9EPFp36NLH
Malware Config
Signatures
Files
-
e4a0e761a6259f3155f86ab7929bb2f5ede03f7a877a5cf5b78e22414db6b5e3.exe windows x86
38d73bf3d93c9008725dd625aa902648
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA
user32
CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
advapi32
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
Sections
.text Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ