Static task
static1
Behavioral task
behavioral1
Sample
e2de1995124fd778334d3cfeb6011a5f1ca21fab5347a2fefcac72a88b06df0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2de1995124fd778334d3cfeb6011a5f1ca21fab5347a2fefcac72a88b06df0a.exe
Resource
win10v2004-20221111-en
General
-
Target
e2de1995124fd778334d3cfeb6011a5f1ca21fab5347a2fefcac72a88b06df0a
-
Size
471KB
-
MD5
c20cb7c6a2a3003a198e222c03ec1f66
-
SHA1
0360ebac8fb91a1d4d2912d93d7a833fdc5422da
-
SHA256
e2de1995124fd778334d3cfeb6011a5f1ca21fab5347a2fefcac72a88b06df0a
-
SHA512
37f93ab47619dd6177cc260ac3a84f997c44ec4c78cb9baf8aead45884f56e65dc115cac10a22b95faf5ed58ea9ae9edd68da32bc22cba0e1df32ce2cbb3ff1d
-
SSDEEP
12288:vihQBFOloBkG8/RnWvy9uNZVXBRkgAMoQ6rl5Xd5Nx8RtB9V:viQQON8cvyQjXMNMul5t5Nwd
Malware Config
Signatures
Files
-
e2de1995124fd778334d3cfeb6011a5f1ca21fab5347a2fefcac72a88b06df0a.exe windows x86
ea00bc68afe3d83c08c7ff80facf14cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
SetFilePointer
ReadFile
CreateFileA
CreateProcessA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
DeleteFileA
Sleep
FreeEnvironmentStringsW
GetEnvironmentStrings
LoadLibraryA
GetProcAddress
SetEndOfFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
WriteFile
HeapFree
TerminateProcess
GetCurrentProcess
SetHandleCount
CloseHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
VirtualFree
RtlUnwind
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
SetStdHandle
FlushFileBuffers
VirtualAlloc
HeapAlloc
GetStringTypeA
LCMapStringA
LCMapStringW
GetStringTypeW
user32
LoadStringA
FindWindowA
MessageBeep
MessageBoxA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 831B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ