Static task
static1
Behavioral task
behavioral1
Sample
e9449c8a3e26d55cb286153a6f516debcb66c781e60523e8f51a302c9c30eecc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9449c8a3e26d55cb286153a6f516debcb66c781e60523e8f51a302c9c30eecc.exe
Resource
win10v2004-20220812-en
General
-
Target
e9449c8a3e26d55cb286153a6f516debcb66c781e60523e8f51a302c9c30eecc
-
Size
23KB
-
MD5
469128db6fab0b1e27bf01e6677ca1b5
-
SHA1
7010df3a9a220c728ebf20dce6de7ba7d2c74f13
-
SHA256
e9449c8a3e26d55cb286153a6f516debcb66c781e60523e8f51a302c9c30eecc
-
SHA512
6c2d167f653e5406af9659ef03ab63e5461d11b6475376205e7553e7ec98f1f49bcd2344ccecfd0cc393ee297bb70c6f815c9ef5a3dec9ffbb9dee6ed53b3375
-
SSDEEP
192:cxTdClL4UTgW3wdqtCf/JMGxEdvwNkAXOGHYEOHbPc0w4oQiK3pI:okp44l0qMyVqtYH7w4niK3p
Malware Config
Signatures
Files
-
e9449c8a3e26d55cb286153a6f516debcb66c781e60523e8f51a302c9c30eecc.exe windows x86
b36a6b47f8190f2f789a2ac5b9eb1064
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
GetTickCount
FreeLibrary
LocalAlloc
lstrcpyA
GlobalFree
Sleep
GlobalAlloc
lstrlenA
GetFileSize
GetVersionExA
gdi32
SelectObject
ExtTextOutA
CreateCompatibleDC
GetObjectA
BitBlt
CreateFontIndirectA
SetBkMode
LineTo
GetTextColor
DeleteObject
GetStockObject
CreateSolidBrush
GetDeviceCaps
GetBkColor
SetPixel
SetROP2
GetTextExtentPoint32A
msvcrt
_c_exit
_adjust_fdiv
exit
__set_app_type
_controlfp
_acmdln
__CxxFrameHandler
wcstoul
__setusermatherr
_exit
__getmainargs
_XcptFilter
_except_handler3
__p__commode
rand
_initterm
__p__fmode
memmove
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ