Static task
static1
Behavioral task
behavioral1
Sample
e7fad819254173ff34ddabba71f1cf4a7a9ee34e6278916054d2e8ba770d4c41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7fad819254173ff34ddabba71f1cf4a7a9ee34e6278916054d2e8ba770d4c41.exe
Resource
win10v2004-20220812-en
General
-
Target
e7fad819254173ff34ddabba71f1cf4a7a9ee34e6278916054d2e8ba770d4c41
-
Size
38KB
-
MD5
694256328a0486ae6fb1481154a1f34e
-
SHA1
c3d4b33421375f679bda3563205c7493ab7eedde
-
SHA256
e7fad819254173ff34ddabba71f1cf4a7a9ee34e6278916054d2e8ba770d4c41
-
SHA512
84516b88e299f12536530994f67314f30d553659b96795dcc6d3056a5ab6ddd9d95a7a9ea5e3b5e90cc0ea59bbdf84d152d5ff46f8570dba7ffee2aa2f366d66
-
SSDEEP
384:smtSpR+POLCuk92uWg12KDeeWv6CpRgGJufPnJFpQG3H3uY3lrH5PIm8D27JlttY:juRjtkgiyefCTfAfTNX+Y3lKK7VFE
Malware Config
Signatures
Files
-
e7fad819254173ff34ddabba71f1cf4a7a9ee34e6278916054d2e8ba770d4c41.exe windows x86
ab2553c3a7f1b9909425390302fcc830
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetTempPathW
GetModuleHandleW
GlobalAlloc
OpenEventW
CopyFileA
ClearCommBreak
VirtualAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
GetFileSize
CancelTimerQueueTimer
AddAtomW
GetConsoleNlsMode
DeleteCriticalSection
BeginUpdateResourceW
TerminateProcess
MoveFileA
CancelIo
AllocConsole
ExitProcess
SetUnhandledExceptionFilter
CreateFileW
GetCurrentProcessId
OpenDataFile
FindAtomW
OpenConsoleW
GetLastError
LeaveCriticalSection
GetConsoleCP
msvcrt
_cabs
_chdir
_access
_atoldbl
_cgetws
_atoi64
_assert
_cgets
_chgsign
ws2_32
closesocket
WSALookupServiceNextW
accept
bind
socket
WSACleanup
listen
WSAStartup
Sections
.data Size: - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ