Static task
static1
Behavioral task
behavioral1
Sample
e0c6b4c93692aedf2e31c08268745425bb78b8c28c5eb55d41825faba4b40312.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e0c6b4c93692aedf2e31c08268745425bb78b8c28c5eb55d41825faba4b40312.exe
Resource
win10v2004-20220812-en
General
-
Target
e0c6b4c93692aedf2e31c08268745425bb78b8c28c5eb55d41825faba4b40312
-
Size
194KB
-
MD5
efe654c0e3b7570a60fae19b5fc9a66b
-
SHA1
11bdec73ef4f89b8e34ef87000ef4dec9ba16fea
-
SHA256
e0c6b4c93692aedf2e31c08268745425bb78b8c28c5eb55d41825faba4b40312
-
SHA512
b8fa175b07648b0fe7d19bc3415b9d49279c11ac0045b83251a9ff8f226e4b4fb3ae915edc6dfc9729944836dd5d55e0ed79322571ede07583d391b05d14c42c
-
SSDEEP
3072:P2UTj17ey7VOZnrwdVoPFHGRuY4euLV7/AtfbMQGHBqUypKDLjf9eqbUES:Px7eKQZn7PZB/eWLKfAdHBU2Lz9eIS
Malware Config
Signatures
Files
-
e0c6b4c93692aedf2e31c08268745425bb78b8c28c5eb55d41825faba4b40312.exe windows x86
77d5338c8b1d545bef32bbc12dc52d08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
rpcrt4
NdrFixedArrayFree
UuidCreate
shlwapi
PathFileExistsW
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
kernel32
VirtualAllocEx
CreateProcessA
LocalAlloc
lstrlenA
EnumResourceNamesA
WideCharToMultiByte
GetSystemTimeAsFileTime
RaiseException
OpenSemaphoreW
MultiByteToWideChar
InterlockedExchange
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ