Static task
static1
Behavioral task
behavioral1
Sample
e9e6f4a3d72481ee08cb0bb8f4faaaedd0165301d2aa6a569f85762510cfb3d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9e6f4a3d72481ee08cb0bb8f4faaaedd0165301d2aa6a569f85762510cfb3d3.exe
Resource
win10v2004-20220812-en
General
-
Target
e9e6f4a3d72481ee08cb0bb8f4faaaedd0165301d2aa6a569f85762510cfb3d3
-
Size
914KB
-
MD5
16ee16d02f3a93734c1754386208308a
-
SHA1
b5f3fce73305608dbd65368bd4cc8903373db4ca
-
SHA256
e9e6f4a3d72481ee08cb0bb8f4faaaedd0165301d2aa6a569f85762510cfb3d3
-
SHA512
6f091fdb3be778ecece04bbeac9e3f9973c22f70e42abd5a6f15da867e39dafa5ee7cb8d0de3dd011541774bb20b03ae4c524baca4675bf855d00bb4b164aa84
-
SSDEEP
24576:1HBcdqC3b7gSBMvWJlUfmvETAWBO1VVx7XTbakL:1HCLvgS+v4KuvuAD3VlTbak
Malware Config
Signatures
Files
-
e9e6f4a3d72481ee08cb0bb8f4faaaedd0165301d2aa6a569f85762510cfb3d3.exe windows x86
138bab5dfb5350d4cb16c35f5b14b8f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
CLSIDFromString
comctl32
InitializeFlatSB
wininet
InternetOpenUrlW
shell32
Shell_NotifyIconW
comdlg32
GetSaveFileNameW
Sections
.text Size: 803KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE