Static task
static1
Behavioral task
behavioral1
Sample
e3d178e7853724b49f3359194bd2a326ba6b02962e56fab4ccbfb24701ae9d3f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e3d178e7853724b49f3359194bd2a326ba6b02962e56fab4ccbfb24701ae9d3f.exe
Resource
win10v2004-20221111-en
General
-
Target
e3d178e7853724b49f3359194bd2a326ba6b02962e56fab4ccbfb24701ae9d3f
-
Size
138KB
-
MD5
cc730d0af9cc39381d2e79d92e11d63b
-
SHA1
eb8e1d6a73825368c347841bcc43d3e762357220
-
SHA256
e3d178e7853724b49f3359194bd2a326ba6b02962e56fab4ccbfb24701ae9d3f
-
SHA512
ecd33ecc39d11bda0fe7d0d2b61148c29a3b92e170406536d7fecac2e97f0e113f337f171370b18f6b98e87354675ea92c253834096b5b9e2c12de04148e4508
-
SSDEEP
3072:jcMMeo4+HTgK0KeD8x72RhrbUWOjk9TqR+iwEjWbM34ofzhDDE6T+:ceQHTR0HD8x70PUWOjk9TqR+iN1zh/E
Malware Config
Signatures
Files
-
e3d178e7853724b49f3359194bd2a326ba6b02962e56fab4ccbfb24701ae9d3f.exe windows x86
7e9027813da1a328f73dfa0b3ad276fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CreateFileA
CreateFileMappingA
CreateProcessA
CreateThread
DeleteFileA
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
FindResourceA
GetCPInfo
GetConsoleOutputCP
GetCurrentProcess
GetEnvironmentStringsA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileSectionA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStringTypeA
GetTempFileNameA
GetVersion
GetVersionExA
HeapAlloc
HeapDestroy
HeapSize
IsBadCodePtr
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
Module32Next
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
ReadProcessMemory
RemoveDirectoryA
ResetEvent
RtlUnwind
SearchPathA
SetCurrentDirectoryA
SetEvent
Sleep
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrlenA
user32
CharNextA
DestroyIcon
EnableWindow
GetDlgCtrlID
LoadCursorA
LoadStringA
SetWindowTextA
advapi32
CreateServiceA
RegCloseKey
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ