Static task
static1
Behavioral task
behavioral1
Sample
2e45502934bfd43422253da8e4be46acc3b984bd280c382cee548102ce6e4a10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e45502934bfd43422253da8e4be46acc3b984bd280c382cee548102ce6e4a10.exe
Resource
win10v2004-20221111-en
General
-
Target
2e45502934bfd43422253da8e4be46acc3b984bd280c382cee548102ce6e4a10
-
Size
115KB
-
MD5
0be1fd2b96850473095fcb4c97761b7d
-
SHA1
57c7d79dc390017ce5e4527a6a213f8e5d7a694d
-
SHA256
2e45502934bfd43422253da8e4be46acc3b984bd280c382cee548102ce6e4a10
-
SHA512
228856be8188eef51c5e81c699948224406dcb6565c8dc717b2203bbfc3f6f38536c775cc7cb7b4aa4e0a35a82bcc6628ccc2824e4355067e196b6b2c3b1b19b
-
SSDEEP
3072:WNfBlc+yA06y1k6e4wp4ej4C1dtHFjVYOwmlp:UfHnVv4wp4ej4C1dtEeT
Malware Config
Signatures
Files
-
2e45502934bfd43422253da8e4be46acc3b984bd280c382cee548102ce6e4a10.exe windows x86
020ebedc9aad3cfdcb427bb7b8e7b49f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
SetLastError
VirtualFree
GetProcessHeap
Sleep
ExitProcess
user32
GetMessagePos
Sections
.text Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Uwsc, Eq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Yroqw Xa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lgmi, Bw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 259B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
klwclps Size: - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE