Static task
static1
Behavioral task
behavioral1
Sample
e1b835612337774870e81e63509ddd17b3373fa4633d73374a465c193bfe38fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1b835612337774870e81e63509ddd17b3373fa4633d73374a465c193bfe38fe.exe
Resource
win10v2004-20220812-en
General
-
Target
e1b835612337774870e81e63509ddd17b3373fa4633d73374a465c193bfe38fe
-
Size
32KB
-
MD5
4a304cdc2743e47e1d0f0241f97f7ae2
-
SHA1
c44571e0908f4474ec9b7c9ec7b77fa6377138e8
-
SHA256
e1b835612337774870e81e63509ddd17b3373fa4633d73374a465c193bfe38fe
-
SHA512
67dd46ec8d17915be18e3f6dc10ab039d9a2358559eb06ff0db14ce8a597f51e481b118a52654d899e131a67907ee7160850507cae41ea2cabf7b71e8e837a34
-
SSDEEP
768:V1UEePprBmh/F/93hv5PRNk8PAtAeyDFnNdQJpdEW:8PprBmh/F9hjNfWy1Q7dR
Malware Config
Signatures
Files
-
e1b835612337774870e81e63509ddd17b3373fa4633d73374a465c193bfe38fe.exe windows x86
e0b71f9836e9d955f820349cc5169ffe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
kernel32
GetLastError
SetPriorityClass
GetCurrentProcess
GetVersionExW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
MultiByteToWideChar
lstrlenW
lstrcpyW
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
HeapDestroy
SetEvent
CloseHandle
WaitForSingleObject
lstrcpynW
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateThread
CreateEventW
lstrcatW
lstrlenA
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
Sleep
HeapSetInformation
GetCurrentThreadId
GetCommandLineW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
RtlUnwind
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
SetUnhandledExceptionFilter
user32
DispatchMessageW
CharPrevW
PostThreadMessageW
CharNextW
GetMessageW
msvcrt
??2@YAPAXI@Z
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
memset
_purecall
memcpy
realloc
free
malloc
ole32
CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
oleaut32
SysStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.uuu9 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ