Static task
static1
Behavioral task
behavioral1
Sample
e8e9c2729f26ed2c94bdf295e12dc00e3a759693a47763fc20e7df1e3da3b6fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8e9c2729f26ed2c94bdf295e12dc00e3a759693a47763fc20e7df1e3da3b6fa.exe
Resource
win10v2004-20220812-en
General
-
Target
e8e9c2729f26ed2c94bdf295e12dc00e3a759693a47763fc20e7df1e3da3b6fa
-
Size
880KB
-
MD5
04eba35dc610ba1231713a019a989f41
-
SHA1
96933a4b2dde36b96d17d8b6659a1ea6bd2de5c3
-
SHA256
e8e9c2729f26ed2c94bdf295e12dc00e3a759693a47763fc20e7df1e3da3b6fa
-
SHA512
38277718a37a983b1724098d9895655c1c63cca3ab72d9e5318db8f599b0ebddd7052d5e20e50fb14d41a75c230b878132e9166f5a7764812d08293ecbc1f278
-
SSDEEP
12288:8IKn44zM7UIzJlLGQfBfeiTWBdWRccfZ9qydqHvGGRVbVSIlVgoOFBR0b:8H44zMdlLTfQiTOdhCZHCjpVSIOFB2
Malware Config
Signatures
Files
-
e8e9c2729f26ed2c94bdf295e12dc00e3a759693a47763fc20e7df1e3da3b6fa.exe windows x86
878e0e338efdb11c11cf594f7f4049a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
IsDebuggerPresent
GetModuleHandleA
CloseHandle
CreateFileMappingW
GetCommandLineA
DeleteFileA
GetConsoleAliasA
CreateFileW
HeapDestroy
CloseHandle
LocalSize
DeviceIoControl
TlsAlloc
Sleep
FindClose
GetStartupInfoA
GetModuleFileNameW
HeapCreate
lstrlenA
user32
DrawTextW
GetIconInfo
LoadImageA
CallWindowProcW
DestroyWindow
IsWindow
PeekMessageA
FindWindowW
DispatchMessageA
IsZoomed
DestroyMenu
GetWindowLongA
DispatchMessageA
devenum
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ