Static task
static1
Behavioral task
behavioral1
Sample
e132f0bc67de3cad744dc47ac69efb8f07ec0c2c83302a24a4dc836a1c6b6789.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e132f0bc67de3cad744dc47ac69efb8f07ec0c2c83302a24a4dc836a1c6b6789.exe
Resource
win10v2004-20220812-en
General
-
Target
e132f0bc67de3cad744dc47ac69efb8f07ec0c2c83302a24a4dc836a1c6b6789
-
Size
24.7MB
-
MD5
f37c48325a3e71eab7d9b605c5b50a25
-
SHA1
1a0f0845aacb555db2a9c63c5f3b0ba927550e0a
-
SHA256
e132f0bc67de3cad744dc47ac69efb8f07ec0c2c83302a24a4dc836a1c6b6789
-
SHA512
43db71ad4a06a32a11cb51d9ef699b292ab7891030bfc103f089f8f278bf7a9b7020ac0f2c0604ede195ce6246d583bb61b8254e2ac325d7fc69d2a330b09a0a
-
SSDEEP
393216:pE5IQInfu6/lANRpmsi0EdqixErnYQM76l51H1L/FnTBqg1fO9ll1Ziv5kG64td:pdu6/mNi1qrnhX1VL/NfO9llriv5rztd
Malware Config
Signatures
Files
-
e132f0bc67de3cad744dc47ac69efb8f07ec0c2c83302a24a4dc836a1c6b6789.exe windows x86
503da091c2168a0d38bdf00a95286584
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetCompressedFileSizeW
CreateTimerQueueTimer
VirtualAlloc
quartz
DllCanUnloadNow
DBToAmpFactor
AMGetErrorTextW
AmpFactorToDB
DllUnregisterServer
AMGetErrorTextA
DllGetClassObject
DllRegisterServer
ws2_32
WSAGetLastError
advpack
GetVersionFromFile
msvcp60
_Toupper
Sections
.data Size: - Virtual size: 14.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 613KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE