Static task
static1
Behavioral task
behavioral1
Sample
e4fac67e70ad489e81368f68f648cc301ed6a2e63caace649e329ed19f2a00a8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4fac67e70ad489e81368f68f648cc301ed6a2e63caace649e329ed19f2a00a8.exe
Resource
win10v2004-20221111-en
General
-
Target
e4fac67e70ad489e81368f68f648cc301ed6a2e63caace649e329ed19f2a00a8
-
Size
160KB
-
MD5
fc2003e6743160ab7d6e5a347da5927c
-
SHA1
f53dd9be34b91fc216ec9b3b778868d2dc51bb77
-
SHA256
e4fac67e70ad489e81368f68f648cc301ed6a2e63caace649e329ed19f2a00a8
-
SHA512
1508940a78601fcfffb312f655eae08d3e832dc14d68aea9fb554aea71dacff3bb5233b6e17059b3a541a0425edbd1a97fb3b82acbd3e766bf9517778eeacfb3
-
SSDEEP
3072:iTTtXlagOu78XSuh/MWVUSrACgijKpPKeHb8IODOaD5IYu75FzfprM:itlaNs8XSE0WVFrACNkX78dx5lmFzfpo
Malware Config
Signatures
Files
-
e4fac67e70ad489e81368f68f648cc301ed6a2e63caace649e329ed19f2a00a8.exe windows x86
7632ea5ebe7cfe6559a6c7811d234957
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
LCMapStringW
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
GetStringTypeA
lstrlenA
Sleep
CloseHandle
VerLanguageNameA
VirtualAlloc
FreeConsole
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
user32
MessageBoxA
CreateWindowExA
EnableMenuItem
TrackPopupMenu
GetParent
InsertMenuA
GetSubMenu
DestroyIcon
SetFocus
CallWindowProcA
LoadMenuA
DialogBoxParamA
GetSysColor
UpdateWindow
KillTimer
gdi32
TextOutA
GetFontData
CreateDIBitmap
DeleteDC
SelectPalette
BitBlt
DeleteObject
shell32
ShellExecuteA
SHGetFileInfoA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ