Static task
static1
Behavioral task
behavioral1
Sample
e046c0864e366e101243c1e5ca767e563be0694c808c4f1136fce519c92aa5f9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e046c0864e366e101243c1e5ca767e563be0694c808c4f1136fce519c92aa5f9.exe
Resource
win10v2004-20221111-en
General
-
Target
e046c0864e366e101243c1e5ca767e563be0694c808c4f1136fce519c92aa5f9
-
Size
304KB
-
MD5
11e005e71124729ba6fad656b09dd6f3
-
SHA1
92fc4606665f1413ef3e1d2015c292fc8f3e7ae7
-
SHA256
e046c0864e366e101243c1e5ca767e563be0694c808c4f1136fce519c92aa5f9
-
SHA512
c11acc2eca00f5f849cac15d348b9fcf5ef27a12f6053b395a7d87a30aaa495faf9953a53d5bf572627c83f431b0234b900bc0e096e9a320d6a7ae15f3cfb88b
-
SSDEEP
6144:TTtnygBNC4FEPwGE0JhXX1/NvtxMSB0rnb3GZz/0fnptIG3:TTtyYtE5HvtxKSZz/0fnbIG
Malware Config
Signatures
Files
-
e046c0864e366e101243c1e5ca767e563be0694c808c4f1136fce519c92aa5f9.exe windows x86
88d8f72c2e78b05593766e3f4905d519
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
ResumeThread
GetModuleHandleA
HeapCreate
GetPrivateProfileStringA
ReadFile
SetEvent
CreateEventW
GetCurrentProcessId
GetConsoleAliasA
LocalFree
GetCurrentThreadId
EnumCalendarInfoA
FindClose
FindAtomW
lstrlenW
SetLastError
TlsGetValue
EnterCriticalSection
GetNumberFormatW
user32
GetSysColor
DrawTextA
DispatchMessageA
DispatchMessageA
GetKeyState
SetFocus
GetCursorInfo
GetClassInfoA
IsWindow
GetClientRect
GetKeyboardType
CallWindowProcW
GetMenuInfo
tspkg
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
dsprop
CheckADsError
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ