Static task
static1
Behavioral task
behavioral1
Sample
e2ea25190f7c62cb7797d3594c5195615605c8da66a8ff4935ee44e5ca39e510.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2ea25190f7c62cb7797d3594c5195615605c8da66a8ff4935ee44e5ca39e510.exe
Resource
win10v2004-20220812-en
General
-
Target
e2ea25190f7c62cb7797d3594c5195615605c8da66a8ff4935ee44e5ca39e510
-
Size
688KB
-
MD5
06185ff3a3c22620e01cf6830d358a80
-
SHA1
278e83db2cc756d27a555598694d492057e0e22e
-
SHA256
e2ea25190f7c62cb7797d3594c5195615605c8da66a8ff4935ee44e5ca39e510
-
SHA512
12fdeb720010fa15aa71dfcf9a6dff23016db0812013babb585778f4a8ca37989186482cc83a9060b48a94cf6094575e930657c7d199ef88ea07ed7f8e66534e
-
SSDEEP
12288:eN0+LgqCjnCVF/DSPMgEqQft1LMHbsETzZWjY3fxZ4XKj0xe:eyYgbjCfb3gEqOtO75TXPxZ4a0c
Malware Config
Signatures
Files
-
e2ea25190f7c62cb7797d3594c5195615605c8da66a8ff4935ee44e5ca39e510.exe windows x86
8e086fbc650bc5b2fbfee74c3e52ba03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
ExitProcess
GetVersion
GetTickCount
CreateFileA
FormatMessageA
Sleep
HeapCreate
InitializeCriticalSection
WriteConsoleA
TerminateProcess
FreeLibrary
GlobalLock
lstrcpynA
CloseHandle
SetUnhandledExceptionFilter
InterlockedExchange
ReadFile
SetStdHandle
WaitForMultipleObjects
GetCommandLineA
HeapSize
UnhandledExceptionFilter
GetCurrentDirectoryA
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetModuleFileNameA
FlushFileBuffers
GetVersionExA
HeapAlloc
SetEvent
GetFileAttributesA
GetSystemInfo
EnterCriticalSection
GetStdHandle
HeapFree
GetLastError
VirtualAlloc
GetModuleHandleA
GetCurrentProcess
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
VirtualFree
RtlUnwind
WriteFile
LeaveCriticalSection
GetCPInfo
GetACP
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
user32
GetWindowLongA
TranslateMessage
LoadStringA
SetForegroundWindow
GetSystemMetrics
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 632KB - Virtual size: 634KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ