Static task
static1
Behavioral task
behavioral1
Sample
e6a5ec3b59184809e1e622149552008ab090c6a0262d7b1139bda3751a8fd038.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e6a5ec3b59184809e1e622149552008ab090c6a0262d7b1139bda3751a8fd038.exe
Resource
win10v2004-20220812-en
General
-
Target
e6a5ec3b59184809e1e622149552008ab090c6a0262d7b1139bda3751a8fd038
-
Size
185KB
-
MD5
2e88650ba6e8dda254864974bbbe911a
-
SHA1
dd3e4444c5dfd649e88ab3ccda9ab77200024ddc
-
SHA256
e6a5ec3b59184809e1e622149552008ab090c6a0262d7b1139bda3751a8fd038
-
SHA512
b1d57cbdea7a8167594dd8c810a6bf51cc04d6aee43662b708ac3eb62d40cd33866337347299d12d9ccb732f106337bf7344883e47a47c2571195019b42150e7
-
SSDEEP
3072:VpQk3k6bFL1i5haYY955Mm00zCWqRaD6CkW3OxW3KzwEh9D+zZYSL7JJ+peUsVc7:U65BP55BC3seCkdW3KeYG7JJGsVe
Malware Config
Signatures
Files
-
e6a5ec3b59184809e1e622149552008ab090c6a0262d7b1139bda3751a8fd038.exe windows x86
e15d0ba144f685e82b5d2978a680dcc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetStdHandle
GetConsoleCP
GetVersion
GetSystemDefaultLangID
GlobalUnlock
SetConsoleCP
GetAtomNameA
CloseHandle
InterlockedExchange
VirtualProtect
GetModuleHandleA
WaitForSingleObject
lstrlenA
SuspendThread
HeapCreate
GetCommandLineA
HeapReAlloc
WaitForMultipleObjects
GetTickCount
LoadLibraryExA
user32
GetCursorInfo
DestroyMenu
SetPropA
FillRect
DispatchMessageA
CreateMenu
DrawCaption
DialogBoxParamA
InvertRect
SetScrollInfo
DragObject
DragDetect
SetWindowPos
CreateIcon
GetKeyboardLayout
InsertMenuA
GetDlgItem
GetKeyState
FindWindowA
IsDialogMessage
winmm
OpenDriver
auxGetVolume
PlaySoundA
auxSetVolume
CloseDriver
version
VerQueryValueA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ