Static task
static1
Behavioral task
behavioral1
Sample
e4a9f5761514da36d7e00f72871e50acea6389b83a4118ad350eb176e9a962a0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4a9f5761514da36d7e00f72871e50acea6389b83a4118ad350eb176e9a962a0.exe
Resource
win10v2004-20221111-en
General
-
Target
e4a9f5761514da36d7e00f72871e50acea6389b83a4118ad350eb176e9a962a0
-
Size
188KB
-
MD5
b82fe2a4e8bd5509de60ba7cb2e153ad
-
SHA1
19c8e24dace06bfb35c67d3b1852d4d9220d4b08
-
SHA256
e4a9f5761514da36d7e00f72871e50acea6389b83a4118ad350eb176e9a962a0
-
SHA512
fc17ffdcc3f88a8e43aec72f6ac05d8f0edab93ea5dd67d3c5fbff46cfb72d1265ffbe232751f699da259150ab0631822097efe5aa2abdd1e521c9fca412b0ef
-
SSDEEP
3072:4bX3kKGlGiPqEWMHo/qaT/OgEe130MTfPOlYKCJqdcXGJQow5MZJ9xQRg3se7L14:EX3kVEiPqsHhaT/330MY2MQgZUg3sy1
Malware Config
Signatures
Files
-
e4a9f5761514da36d7e00f72871e50acea6389b83a4118ad350eb176e9a962a0.exe windows x86
529287ddb05145bbea8de29cd3726e2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
DeleteCriticalSection
SetUnhandledExceptionFilter
GlobalAlloc
FindAtomW
GetComputerNameW
MulDiv
TlsSetValue
InterlockedDecrement
GetLocaleInfoW
CloseHandle
MultiByteToWideChar
InitializeCriticalSection
lstrlenW
WaitForSingleObject
InterlockedExchange
SetLastError
InterlockedIncrement
GlobalUnlock
GetOEMCP
lstrlenA
TlsGetValue
LocalAlloc
SetLastError
EnumResourceNamesA
GlobalFree
GlobalLock
FormatMessageW
CreateFileW
GlobalHandle
TlsFree
lstrcmpW
TlsAlloc
RaiseException
GetStringTypeA
GetTickCount
HeapSetInformation
GetCurrentThreadId
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
WideCharToMultiByte
oleacc
CreateStdAccessibleObject
shlwapi
StrRetToStrA
PathAppendA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathCreateFromUrlW
Sections
.text Size: 94KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ