Static task
static1
Behavioral task
behavioral1
Sample
e5254e3c1c6b395a75921ee361fd86c8a3e2a094fd123ac7fb043228628941e8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e5254e3c1c6b395a75921ee361fd86c8a3e2a094fd123ac7fb043228628941e8.exe
Resource
win10v2004-20220901-en
General
-
Target
e5254e3c1c6b395a75921ee361fd86c8a3e2a094fd123ac7fb043228628941e8
-
Size
463KB
-
MD5
beb7ae0d2f8632c7b1702cc2457099a2
-
SHA1
7fdcf41a66f97741536adccf1b5c0f234a6ff61f
-
SHA256
e5254e3c1c6b395a75921ee361fd86c8a3e2a094fd123ac7fb043228628941e8
-
SHA512
32141afd408febd043198a0702a688c83ad8ff122f2f769892d05ee0eab8d820758d77c7aa680fec2931f6d192a8c49cc1a6b5fa37df3a693bc44d802e664bf7
-
SSDEEP
12288:Ef/E/RHOv8du2YeuGRf/E/RHOvotXV+3tlL180F+GZe:EEwv8XYezEwvotQlL18wL
Malware Config
Signatures
Files
-
e5254e3c1c6b395a75921ee361fd86c8a3e2a094fd123ac7fb043228628941e8.exe windows x86
46583692b36b3f48a6344e05ce34a25a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
wininet
InternetConnectA
InternetOpenA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
kernel32
GetProcAddress
CloseHandle
GetCommandLineW
MoveFileExW
ExitProcess
AllocateUserPhysicalPages
VirtualAlloc
WriteFile
SizeofResource
LockResource
FindResourceA
GetShortPathNameA
VirtualFree
GetModuleFileNameA
CreateJobObjectA
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetModuleHandleA
SearchPathA
CreateFileA
LoadResource
GetTempFileNameA
WinExec
GetTempPathA
GetTickCount
user32
EndDialog
GetDesktopWindow
MoveWindow
GetWindowRect
CreateWindowExA
DialogBoxParamA
SetDlgItemTextA
ShowWindow
UpdateWindow
advapi32
RegSetValueExW
RegCreateKeyExW
shell32
CommandLineToArgvW
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ