Static task
static1
Behavioral task
behavioral1
Sample
e11a6eb785b1cb80fe915e6d47359164e3e5a46fee06a237dec276959242f11d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e11a6eb785b1cb80fe915e6d47359164e3e5a46fee06a237dec276959242f11d.exe
Resource
win10v2004-20220812-en
General
-
Target
e11a6eb785b1cb80fe915e6d47359164e3e5a46fee06a237dec276959242f11d
-
Size
132KB
-
MD5
e5aa68ce944ab761ee01657e0f9b6b6f
-
SHA1
a77d49dfe2881f19a4a009abc143a06b6001edee
-
SHA256
e11a6eb785b1cb80fe915e6d47359164e3e5a46fee06a237dec276959242f11d
-
SHA512
2c96d461d6a1ae2d74763dbf4158c6f9c8807313e7514f748acd15cfab5255eac883fa3f90daf71a74b3100cafc900457674b488f9ddc47075d00fd0ff16f444
-
SSDEEP
3072:VH/E1goTXtpJRI857T82Q0sFImdNodnnnnnnnnnnnn5VCxnnnnnnnBOTnnnnnnn3:xUltpJRl57TfsV8nnnnnnnnnnnnTCxno
Malware Config
Signatures
Files
-
e11a6eb785b1cb80fe915e6d47359164e3e5a46fee06a237dec276959242f11d.exe windows x86
8215bd5c452b3a87ba3fbffc053cc07e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetModuleHandleA
GetTickCount
WaitForSingleObject
CreateEventA
VirtualProtect
lstrlenA
GetModuleFileNameA
GlobalAlloc
GetCommandLineA
VirtualFree
GetProcAddress
LoadLibraryA
TerminateThread
VirtualAlloc
CreateThread
SleepEx
Process32Next
lstrcmpA
CreateToolhelp32Snapshot
Process32First
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
GetSysColor
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ