Static task
static1
Behavioral task
behavioral1
Sample
e5054618606c68776995d1a8adfa17651d599275e5475a1864e3c0382163c22a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5054618606c68776995d1a8adfa17651d599275e5475a1864e3c0382163c22a.exe
Resource
win10v2004-20221111-en
General
-
Target
e5054618606c68776995d1a8adfa17651d599275e5475a1864e3c0382163c22a
-
Size
756KB
-
MD5
2c88373dd478aa2c1b2c6bba7c66fb5e
-
SHA1
ec76aae33c9f5280c57a37362c57cfe14d3144f1
-
SHA256
e5054618606c68776995d1a8adfa17651d599275e5475a1864e3c0382163c22a
-
SHA512
2a2ec0c54fb4c299299d513e4efc8e5ffe5f578084028c71556729ee60eebcb3178db62c1d9a1861c8f95c49999973cb7c4673e193e76ca68c6b225fd939e634
-
SSDEEP
12288:JZTl3vl8xq5U5m4gIsDiBG/vKV+74hfuvY6VhjkaCTNX+vURcKMdPFBN6iiXdqPe:38dw4KNvq+cIvxj5CTNX+v5deqPiwmnx
Malware Config
Signatures
Files
-
e5054618606c68776995d1a8adfa17651d599275e5475a1864e3c0382163c22a.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
CODE Size: - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rxzw2p5q Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ymru.swp Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nlyagcqy Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dff2.6xk Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ayx7ks.p Size: 701KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE