Static task
static1
Behavioral task
behavioral1
Sample
e3ef3c69eec67fa96e92f604313d3a7322aa09767eebd236d663363c900036cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3ef3c69eec67fa96e92f604313d3a7322aa09767eebd236d663363c900036cb.exe
Resource
win10v2004-20220812-en
General
-
Target
e3ef3c69eec67fa96e92f604313d3a7322aa09767eebd236d663363c900036cb
-
Size
560KB
-
MD5
1f9e4164550a60046a6a8ca2af53f90b
-
SHA1
2c15cfd4e05cbbf2a4b33f14d544b3ad2f932998
-
SHA256
e3ef3c69eec67fa96e92f604313d3a7322aa09767eebd236d663363c900036cb
-
SHA512
8864578e262a4783724c1207aa947cd9dd6731c7687c3b9c99168c1f9bbdd151c0bc5d145f18901f43e982dfbffa7a58163258b37f7ce4267084ef0e00ddc2a5
-
SSDEEP
12288:847PKvd5891jfGeb3SNL35lClCL3CiVJpfX2mOmDX:847P51Zbm3JSKXfOmDX
Malware Config
Signatures
Files
-
e3ef3c69eec67fa96e92f604313d3a7322aa09767eebd236d663363c900036cb.exe windows x86
2dc6402ba70c8d4ab40fa57054d7f758
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
HeapValidate
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 320KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 52KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE