Static task
static1
Behavioral task
behavioral1
Sample
e649a352d5b6f41ebdc57d8f546250a3d45e5a60f9425fa0925629ab33f71abc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e649a352d5b6f41ebdc57d8f546250a3d45e5a60f9425fa0925629ab33f71abc.exe
Resource
win10v2004-20220901-en
General
-
Target
e649a352d5b6f41ebdc57d8f546250a3d45e5a60f9425fa0925629ab33f71abc
-
Size
454KB
-
MD5
1b974fce114ed02779c15586e40122e3
-
SHA1
430ea061f5702ccd576e6a4a0e4bdd7c85a85650
-
SHA256
e649a352d5b6f41ebdc57d8f546250a3d45e5a60f9425fa0925629ab33f71abc
-
SHA512
3ed9fd795f13ed2da0f719572d9589cb1f37c17b05fa960179ddafb2e06a363cb23647e247930f17cd298fc8bb319336febe85c6265b16f5597014321400c337
-
SSDEEP
6144:h11bP8eiR1IiTDk9WEUeU4Y6L1ghjMMbdQdb4TZKjDl90/zQW:9bP87fIi8sEUehpySdMTsjDlC/zQW
Malware Config
Signatures
Files
-
e649a352d5b6f41ebdc57d8f546250a3d45e5a60f9425fa0925629ab33f71abc.exe windows x86
7a9a5d315ff6bffcbf4631867b03b477
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
LCMapStringA
GetCurrentProcess
CloseHandle
user32
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
advapi32
RegOpenKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegSetValueA
RegCloseKey
RegCreateKeyA
Sections
.text Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ