Static task
static1
Behavioral task
behavioral1
Sample
e590b3e31ba149c2789603d3397bd1917377214fc0e5fd72e09b9248f11df0ed.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e590b3e31ba149c2789603d3397bd1917377214fc0e5fd72e09b9248f11df0ed.exe
Resource
win10v2004-20220812-en
General
-
Target
e590b3e31ba149c2789603d3397bd1917377214fc0e5fd72e09b9248f11df0ed
-
Size
315KB
-
MD5
aba9222a8bdb28814e91ac97bf497def
-
SHA1
76da22688108f8dfff4f7b072f4891f11c0cb01e
-
SHA256
e590b3e31ba149c2789603d3397bd1917377214fc0e5fd72e09b9248f11df0ed
-
SHA512
af20953642d6e65bb5302cee02bf6d8475a1c7b979b74830c4f8489d106a707718cbe16bb273ad0d50debe9009c44571c6d7be61ca089e037a6408714a412ddf
-
SSDEEP
6144:rmYcHoNV2vxpPziBhJ910A4lliELpAuIFnsP6O7Tnq5vIMeRWifT:qLeV2peBX09+EVlwyPfqxZ6fT
Malware Config
Signatures
Files
-
e590b3e31ba149c2789603d3397bd1917377214fc0e5fd72e09b9248f11df0ed.exe windows x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mx8.q493 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmkadhdm Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ltwntt4h Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhvcncv3 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u84dxhaa Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gpde31.6 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE