Static task
static1
Behavioral task
behavioral1
Sample
e3d9a18918dd9bf8e58f9874b2bfdbc5dec9c5d77fa0f57c18ec5fce30aa4bec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3d9a18918dd9bf8e58f9874b2bfdbc5dec9c5d77fa0f57c18ec5fce30aa4bec.exe
Resource
win10v2004-20221111-en
General
-
Target
e3d9a18918dd9bf8e58f9874b2bfdbc5dec9c5d77fa0f57c18ec5fce30aa4bec
-
Size
180KB
-
MD5
c427d74203bbcd1c605046f57f0afc34
-
SHA1
a60706f3df5dc7103d229c2a921f6687f149300f
-
SHA256
e3d9a18918dd9bf8e58f9874b2bfdbc5dec9c5d77fa0f57c18ec5fce30aa4bec
-
SHA512
4d95fe5e169a8ca2315d8bbaed1c42c3d2c4f88e644ff5d4bcc88f42409665719e99afe0081abb78472749404da5e1dd0b071a56782dfefa99b9791eb11835f6
-
SSDEEP
3072:EB3sqiHmQwLIGKWzKxeiOaU1xhH8lvafi9W2xk:ESqiGelxEl1xhH6v8ijxk
Malware Config
Signatures
Files
-
e3d9a18918dd9bf8e58f9874b2bfdbc5dec9c5d77fa0f57c18ec5fce30aa4bec.exe windows x86
c1ea74776c9a05b899e8d13ed039e8b0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
CreateFileA
LoadLibraryA
LCMapStringA
user32
CloseWindow
CharLowerBuffA
CreateWindowExA
wsprintfA
SetWindowLongA
advapi32
RegDeleteKeyA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegDeleteValueA
Sections
.text Size: 152KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ