Static task
static1
Behavioral task
behavioral1
Sample
e01cb0c82e11339724ec1f62a37e4f0c2a843c297a11ae4cd2d52b768a887977.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e01cb0c82e11339724ec1f62a37e4f0c2a843c297a11ae4cd2d52b768a887977.exe
Resource
win10v2004-20221111-en
General
-
Target
e01cb0c82e11339724ec1f62a37e4f0c2a843c297a11ae4cd2d52b768a887977
-
Size
212KB
-
MD5
cb2de2fc4a55e62682b231a50fad33a8
-
SHA1
576fe686e5edadb4647fd27a8a2980a93b7f71ab
-
SHA256
e01cb0c82e11339724ec1f62a37e4f0c2a843c297a11ae4cd2d52b768a887977
-
SHA512
1fbe49734c2f75c5bf91d3921593007706a2f301d6615be07abba22d9cd50fe1e2b6defe5c9810084a07c427c47424c1b0c1720c34bf1bf18423f3e312bcb79c
-
SSDEEP
6144:ZbDCbbtuI2RVLCX9fmFTsk10nVfCaQ9Plub:NCPtuI2WJ8TsS4Vfy9d
Malware Config
Signatures
Files
-
e01cb0c82e11339724ec1f62a37e4f0c2a843c297a11ae4cd2d52b768a887977.exe windows x86
2e1acc48d18da2c1c4be9ac1992ece1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
lstrlenA
lstrcpyA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ