Static task
static1
Behavioral task
behavioral1
Sample
e571378dbb7b1745eb8a2fed2d43faa2f4b4ec4d699739a4434b0fce68a3341d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e571378dbb7b1745eb8a2fed2d43faa2f4b4ec4d699739a4434b0fce68a3341d.exe
Resource
win10v2004-20220812-en
General
-
Target
e571378dbb7b1745eb8a2fed2d43faa2f4b4ec4d699739a4434b0fce68a3341d
-
Size
18KB
-
MD5
13f0e7cb83a3f0031c7bd0ffbc03bad0
-
SHA1
f43c67f285505ffc951e33e12aa9c57bd09c6e41
-
SHA256
e571378dbb7b1745eb8a2fed2d43faa2f4b4ec4d699739a4434b0fce68a3341d
-
SHA512
f35284fe09e5c5b9bb7baed448fc8a07d1eb75e16518fb8b9820d7bb470f8e578eda30152efdc2cd4fd760fa365f39269e87cb80bf7576eb63445b8b0ae28334
-
SSDEEP
384:pcDWfN2X1+VpfN0/hYKxIXfejJSmFwZDRIK6:pcJIVq/RGXfeYTeK6
Malware Config
Signatures
Files
-
e571378dbb7b1745eb8a2fed2d43faa2f4b4ec4d699739a4434b0fce68a3341d.exe windows x86
ebb8e5f2361ada97a977b7eb9e92181e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
GetCompressedFileSizeA
GetModuleHandleA
GetSystemDirectoryA
FindAtomA
FormatMessageA
GetThreadPriority
IsDebuggerPresent
VirtualProtect
GlobalFree
GetCurrentProcess
GetStdHandle
WriteConsoleA
FlushFileBuffers
GetExpandedNameA
InterlockedExchange
GetCurrentProcessId
GetCurrentThread
GetACP
HeapCreate
GetEnvironmentStringsA
user32
wsprintfA
GetFocus
EndPaint
GetWindowTextLengthA
DrawTextA
GetDlgItem
ReleaseDC
GetWindow
GetCursorPos
FillRect
ValidateRgn
IsIconic
GetClassNameA
BeginPaint
ShowWindow
SetForegroundWindow
SetActiveWindow
GetParent
FrameRect
linkinfo
GetLinkInfoData
ResolveLinkInfoA
GetCanonicalPathInfoA
IsValidLinkInfo
DestroyLinkInfo
rtutils
LogEventW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ