Static task
static1
Behavioral task
behavioral1
Sample
e7da37db164ecb1f41b7d08b822e0242bb444cfbdc48645a797b79f7ad1fee3b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e7da37db164ecb1f41b7d08b822e0242bb444cfbdc48645a797b79f7ad1fee3b.exe
Resource
win10v2004-20220901-en
General
-
Target
e7da37db164ecb1f41b7d08b822e0242bb444cfbdc48645a797b79f7ad1fee3b
-
Size
274KB
-
MD5
f4895f075fd20e95184c79ebd72950f7
-
SHA1
b251afc32a9fdc38c170ca65fa73ccf0bbf02039
-
SHA256
e7da37db164ecb1f41b7d08b822e0242bb444cfbdc48645a797b79f7ad1fee3b
-
SHA512
f989f21d8ed3c8c3b2cae3e91568a5916098cf63f5ef38d1a9282aae0ec1c35c2203faa48985287cf9527a241c53dbeea4b18b59b9525bb8be824cdb68909eb7
-
SSDEEP
6144:BKrtA4Wg67TMd//a6I7zbOb0ar3MS2Regc7igClx:B8A/nTVCLT9JDe
Malware Config
Signatures
Files
-
e7da37db164ecb1f41b7d08b822e0242bb444cfbdc48645a797b79f7ad1fee3b.exe windows x86
90d822c51fdd904110f7e046f8efdb5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
OpenSemaphoreA
GlobalGetAtomNameA
SetTapePosition
ResetEvent
LZClose
GlobalGetAtomNameA
SetFilePointerEx
GetDiskFreeSpaceA
GetCommandLineA
SetThreadIdealProcessor
SetCurrentDirectoryW
SetPriorityClass
SetVolumeLabelA
GetFileSizeEx
GetFileAttributesA
GetStartupInfoA
DeleteTimerQueueTimer
GetCurrentThreadId
SetProcessPriorityBoost
MultiByteToWideChar
GetCurrentThread
SetLocalPrimaryComputerNameA
OpenFileMappingA
GetPrivateProfileStringA
HeapValidate
WaitForDebugEvent
SetThreadAffinityMask
QueueUserWorkItem
GlobalGetAtomNameW
SetHandleInformation
CreateMutexA
SetConsoleCursor
user32
GetClipboardData
InvertRect
MessageBoxExA
GetPropA
DefDlgProcA
QuerySendMessage
CloseClipboard
IntersectRect
MessageBoxExA
GetRawInputDeviceList
IsWinEventHookInstalled
PaintDesktop
MonitorFromPoint
IsHungAppWindow
PostMessageA
SetDeskWallpaper
EnumPropsExA
SetTimer
InsertMenuA
SetScrollInfo
CallWindowProcA
opengl32
glAccum
glAlphaFunc
glCallList
Sections
code Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ