Static task
static1
Behavioral task
behavioral1
Sample
e4ab76e5dc84696620ab87607906a80544559027515a204750ba04fa15b7eb27.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4ab76e5dc84696620ab87607906a80544559027515a204750ba04fa15b7eb27.exe
Resource
win10v2004-20220812-en
General
-
Target
e4ab76e5dc84696620ab87607906a80544559027515a204750ba04fa15b7eb27
-
Size
212KB
-
MD5
dcda7a5890cfb823deceaf05f46cda06
-
SHA1
784091768480c7eca11c72c6783d2fcc9a24456b
-
SHA256
e4ab76e5dc84696620ab87607906a80544559027515a204750ba04fa15b7eb27
-
SHA512
b81d339dfb4c33e5e4e898f0a325ce2baf4c5f10e185cda27ccdc7cbba32367bd2233dd41b46aa9a841cd0eea221b9ddfb7e411ce0cdee4039d255fde68195fb
-
SSDEEP
6144:Kjlmfm94v15x/aLiA8eMRjXHG8sDxXDsG:cbK1HaP8XGjlDs
Malware Config
Signatures
Files
-
e4ab76e5dc84696620ab87607906a80544559027515a204750ba04fa15b7eb27.exe windows x86
605c6ba64998e05f60f31a9290f0dd6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FreeLibrary
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetVersionExA
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
MultiByteToWideChar
GetStringTypeW
user32
GetWindowRect
ShowWindow
gdi32
CombineRgn
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ