Static task
static1
Behavioral task
behavioral1
Sample
e0570eb558f037a2e7f61538c7094ab2f89c0d7b3732a0eb93bf8ec949785d7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0570eb558f037a2e7f61538c7094ab2f89c0d7b3732a0eb93bf8ec949785d7d.exe
Resource
win10v2004-20221111-en
General
-
Target
e0570eb558f037a2e7f61538c7094ab2f89c0d7b3732a0eb93bf8ec949785d7d
-
Size
188KB
-
MD5
304854f5d2478acbe925bb9457d6d0ea
-
SHA1
fed7c522ae2ca5caec362d914639b9e4add6f81c
-
SHA256
e0570eb558f037a2e7f61538c7094ab2f89c0d7b3732a0eb93bf8ec949785d7d
-
SHA512
0de8718d3df53bedd557718cd9bdc00bd1c35ef2d01b23338b2dc3bade34f5d62ffbb2aa9c64c94a51282c986b0de17dd9dbfc701a4554bc96bed75e097209e7
-
SSDEEP
3072:bUxK4FYt4wzgvMO2aZnkzhaG1EG7Zeyx3+xEbnHVYH1gCCSNr3llmlXXAkZk6WGs:/4FrwzEMOrZkkqE1xebn1YVSC3knAz6Y
Malware Config
Signatures
Files
-
e0570eb558f037a2e7f61538c7094ab2f89c0d7b3732a0eb93bf8ec949785d7d.exe windows x86
4875b9859b02294e14f71a6bc0f179dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
ExitProcess
LCMapStringA
GetCurrentProcess
LoadLibraryA
user32
wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
advapi32
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegEnumValueA
Sections
.text Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ