Static task
static1
Behavioral task
behavioral1
Sample
e035d5fa5149b8db90778481c58da6d4fc4da67beb5031fd1282d4d563c44585.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e035d5fa5149b8db90778481c58da6d4fc4da67beb5031fd1282d4d563c44585.exe
Resource
win10v2004-20221111-en
General
-
Target
e035d5fa5149b8db90778481c58da6d4fc4da67beb5031fd1282d4d563c44585
-
Size
9KB
-
MD5
cd5c13f6c7dadf7c6db41bda99fbb262
-
SHA1
bdccc1b7358aa497e093c6eee42cf969463081af
-
SHA256
e035d5fa5149b8db90778481c58da6d4fc4da67beb5031fd1282d4d563c44585
-
SHA512
5c01d5ddc76cedc35b4ed555ac33d43617d5096128b6bd36a8d588ee282af8f6fc76e0f13ee2062dda144da0961fad3046d6e5dc204a836c0f621b718fa1bf4f
-
SSDEEP
96:+ovAUipneKzLbHAewwC2YuB8JhQeRoB7E4/ZjIoplk6l9AyXHp4VqOog7MaKfRBK:+mvSjBwx2YuB6hQeK5tjl1l9AypSogb
Malware Config
Signatures
Files
-
e035d5fa5149b8db90778481c58da6d4fc4da67beb5031fd1282d4d563c44585.exe windows x86
28da00938ba115a999f91567a76bfc01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
malloc
calloc
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
memset
kernel32
CreateFileA
lstrcpyA
lstrcatA
lstrcmpA
GetModuleHandleA
ExitProcess
GetProcAddress
LoadLibraryA
GetFileSize
lstrlenA
ReadFile
CloseHandle
user32
wsprintfA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE