Static task
static1
Behavioral task
behavioral1
Sample
e3e034d3b34713c757ca59e1c3153bff4b129f88e8050f98f7a07a8b45e49713.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3e034d3b34713c757ca59e1c3153bff4b129f88e8050f98f7a07a8b45e49713.exe
Resource
win10v2004-20221111-en
General
-
Target
e3e034d3b34713c757ca59e1c3153bff4b129f88e8050f98f7a07a8b45e49713
-
Size
270KB
-
MD5
7b1ea9504c478288011ffe83fa30fa8e
-
SHA1
283ea952dd45c9b452e7d0a7a62770eb3296849e
-
SHA256
e3e034d3b34713c757ca59e1c3153bff4b129f88e8050f98f7a07a8b45e49713
-
SHA512
39f6cc607d3cffa76e1a38318fdbc0ab74d40421cdc9470e4215a5891cf527a4f20eb1e3abdd6ca506254b9a0d20662c71be233fde9664d6200da721166c2db0
-
SSDEEP
6144:kAraw75o0wptbvOx4uUQ4z3L7q7kT8KnS/yjyeJYoOpJVbkN6bPiah:k6z5WpRU4u/W3/8bFedkVANQx
Malware Config
Signatures
Files
-
e3e034d3b34713c757ca59e1c3153bff4b129f88e8050f98f7a07a8b45e49713.exe windows x86
9338189610a338fef7a441904ed66728
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
LCMapStringA
ExitProcess
GetCurrentProcess
user32
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow
advapi32
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegSetValueA
Sections
.text Size: 202KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ