Static task
static1
Behavioral task
behavioral1
Sample
e176a47771ccd22efd9cf6bd5a2f3c239d0f55832d98d22218f278b7b459ef22.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e176a47771ccd22efd9cf6bd5a2f3c239d0f55832d98d22218f278b7b459ef22.exe
Resource
win10v2004-20221111-en
General
-
Target
e176a47771ccd22efd9cf6bd5a2f3c239d0f55832d98d22218f278b7b459ef22
-
Size
405KB
-
MD5
fd3c57fcbeb4b0b2d02bba298370e9ec
-
SHA1
f2d013857266c3920c6cc45a56283b05bf3c9ac7
-
SHA256
e176a47771ccd22efd9cf6bd5a2f3c239d0f55832d98d22218f278b7b459ef22
-
SHA512
48d84ef30b73416aeffc6ad610b59773e5c8092d0ee0830fb1a28631714624fe73da35d59e609b1fb9f337fe5b4449ab8b4de58b17018105ce61b1ebf326874b
-
SSDEEP
12288:yWWbzNvjW1c6FXAFbe8veUmnamFy6XiKE/KqJ:BOzZsZAgEmamFy6i/7J
Malware Config
Signatures
Files
-
e176a47771ccd22efd9cf6bd5a2f3c239d0f55832d98d22218f278b7b459ef22.exe windows x86
e7f6a4c578e683ce8f412d5b8e50012a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
CreateEventA
LoadLibraryW
GlobalMemoryStatus
ExitProcess
TlsAlloc
GetACP
VirtualFree
SetConsoleCP
DisableThreadLibraryCalls
GetModuleHandleA
GetLastError
SetStdHandle
IsBadCodePtr
GetOEMCP
Sleep
GetCommandLineA
DeleteCriticalSection
GetVersion
HeapAlloc
FileTimeToLocalFileTime
LocalAlloc
VirtualProtect
GetStartupInfoA
user32
ShowWindow
GetMessagePos
EndPaint
SendMessageA
PeekMessageA
IsDlgButtonChecked
gdi32
GetDeviceCaps
SetBkColor
SetBkMode
msvcrt
malloc
_initterm
advapi32
RegQueryInfoKeyW
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE