Static task
static1
Behavioral task
behavioral1
Sample
e96e380daea181d69e770159eb4413b6ab3de66085d1a9d23e17bcbd2fdf2a9d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e96e380daea181d69e770159eb4413b6ab3de66085d1a9d23e17bcbd2fdf2a9d.exe
Resource
win10v2004-20221111-en
General
-
Target
e96e380daea181d69e770159eb4413b6ab3de66085d1a9d23e17bcbd2fdf2a9d
-
Size
695KB
-
MD5
12a381fd015bf4b524ee5fe1095ced20
-
SHA1
0b3026db916216575054ad9383989a2c05dac17d
-
SHA256
e96e380daea181d69e770159eb4413b6ab3de66085d1a9d23e17bcbd2fdf2a9d
-
SHA512
722d0c3eded3e8738f419fb326e4e2cbe291083f468911069e81ddf970c8207e721cca38735ac2475b26a2c4e838049a0d344736bdd2160b57314f97fb653fc9
-
SSDEEP
1536:8y/gRWlngkYFKynXvAh1MFOMLwOueYdqXhVBZXcMik421dNSkWNVYM3O3:8LQgk6Kyn/wMFOMLN9AQdjWzT+
Malware Config
Signatures
Files
-
e96e380daea181d69e770159eb4413b6ab3de66085d1a9d23e17bcbd2fdf2a9d.exe windows x86
b2c2b826f16f34cf04e153c0cd9987df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetThreadContext
CreateFileA
SetFilePointer
SetErrorMode
FindResourceW
SetUnhandledExceptionFilter
GetCurrentProcess
OutputDebugStringW
GetModuleHandleW
GetCurrentThread
WriteFile
OpenProcess
GetVolumeInformationA
GetVersionExW
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
IsDebuggerPresent
WinExec
CloseHandle
CheckRemoteDebuggerPresent
lstrcpyA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
user32
MessageBoxW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ