Static task
static1
Behavioral task
behavioral1
Sample
e03c319dc208f4fb2983850ee34c73b3840562251b318f4ac247a374b034586c.exe
Resource
win7-20220901-en
General
-
Target
e03c319dc208f4fb2983850ee34c73b3840562251b318f4ac247a374b034586c
-
Size
281KB
-
MD5
0f2ebab45d977a6b1751cfe739b8968f
-
SHA1
5d8615c6fa8f5e7bb915aef07ee1ac662b106ac1
-
SHA256
e03c319dc208f4fb2983850ee34c73b3840562251b318f4ac247a374b034586c
-
SHA512
6d7699a44e6973c52b16434244468d95f745bc085d57a3dde4020598bf4e2fe482d71603f7e9a6800e4bd4702235dfc73eac73d5ab4dd1426a4312d481141b88
-
SSDEEP
6144:AHGameY/7cADjvDJhkapvCtDcbZTbD7OG8Vn/S:CGEY/znHp8D2fBga
Malware Config
Signatures
Files
-
e03c319dc208f4fb2983850ee34c73b3840562251b318f4ac247a374b034586c.exe windows x86
5b2640e7fa592addc09cb39f6fc5ea14
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
AddAtomA
GetEnvironmentStrings
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
MulDiv
SetStdHandle
InitializeCriticalSection
DeleteCriticalSection
FindFirstFileA
GetCPInfo
GetThreadLocale
GetLastError
Sleep
GetModuleHandleA
GetStartupInfoA
ReadFile
CreateFileA
SetFilePointer
FreeEnvironmentStringsA
GetProcAddress
VirtualProtect
LCMapStringW
LoadLibraryA
IsBadReadPtr
FreeLibrary
GetFullPathNameA
EnumResourceNamesW
GetOEMCP
IsBadCodePtr
lstrcpynA
lstrcatA
lstrlenW
lstrcmpA
FlushFileBuffers
WideCharToMultiByte
lstrcpyA
LeaveCriticalSection
LCMapStringA
lstrcmpiA
CloseHandle
GetFileAttributesA
GetEnvironmentStringsW
MultiByteToWideChar
GetCurrentThreadId
lstrlenA
GetStringTypeA
WriteFile
GetTickCount
GetDiskFreeSpaceA
EnterCriticalSection
RaiseException
Sections
.text Size: 141KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ