Static task
static1
Behavioral task
behavioral1
Sample
e1b904157dadc04df580aa88e35c8bf6253ebb8dc7234cd9bae0df4ec6d1d42b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1b904157dadc04df580aa88e35c8bf6253ebb8dc7234cd9bae0df4ec6d1d42b.exe
Resource
win10v2004-20221111-en
General
-
Target
e1b904157dadc04df580aa88e35c8bf6253ebb8dc7234cd9bae0df4ec6d1d42b
-
Size
45KB
-
MD5
4389e7847bd87443a3d626a1a1114d79
-
SHA1
4b533b06e6163a3a1fefcf038e15bc3ef97a30b9
-
SHA256
e1b904157dadc04df580aa88e35c8bf6253ebb8dc7234cd9bae0df4ec6d1d42b
-
SHA512
9f59145754e40e3bb12beeed34667f4ccd2852fac4d02796a2dc2ad05f2c2801f02f1a31fa42859b89b5557565d371525a617fc6fa458efc0c33037443c2292c
-
SSDEEP
768:6MR6fdK2xWGFJc4wboHW7PQJcPgJHP7rJDPUJEPCJLQJs:60grc4K4JFJ3JYJTJms
Malware Config
Signatures
Files
-
e1b904157dadc04df580aa88e35c8bf6253ebb8dc7234cd9bae0df4ec6d1d42b.exe windows x86
a614443e9c76b6ec51af3dd02d1bc05d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
CreateFileA
lstrcpyA
WinExec
lstrcmpA
GetModuleHandleA
ExitProcess
DeviceIoControl
user32
DefWindowProcA
TrackPopupMenu
ClientToScreen
CreatePopupMenu
CheckMenuItem
ChangeMenuA
SendMessageA
InvalidateRect
SetWindowPos
GetActiveWindow
DestroyMenu
GetSystemMenu
GetSystemMetrics
EndPaint
BeginPaint
PostQuitMessage
GetWindowRect
SetFocus
GetWindow
IsWindowVisible
GetWindowLongA
PostMessageA
GetDesktopWindow
CreateIconIndirect
SetForegroundWindow
LoadBitmapA
DestroyIcon
ModifyMenuA
ScreenToClient
GetCursorPos
FillRect
SystemParametersInfoA
GetDC
ReleaseDC
WinHelpA
LoadIconA
LoadCursorA
RegisterClassA
LoadStringA
CreateWindowExA
RegisterWindowMessageA
MessageBoxA
GetWindowTextA
GetSysColor
ShowWindow
UpdateWindow
SetTimer
TranslateMessage
DispatchMessageA
GetMessageA
KillTimer
gdi32
CreateSolidBrush
CreateBitmap
DeleteDC
BitBlt
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SetBkColor
SelectObject
SetTextColor
shell32
Shell_NotifyIconA
comctl32
ord17
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE