Static task
static1
Behavioral task
behavioral1
Sample
e9015625531d66ae12491251797e63970d5c94a30799f28a755b3a5854abba77.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e9015625531d66ae12491251797e63970d5c94a30799f28a755b3a5854abba77.exe
Resource
win10v2004-20221111-en
General
-
Target
e9015625531d66ae12491251797e63970d5c94a30799f28a755b3a5854abba77
-
Size
29KB
-
MD5
c60b0ec3f9c5f1a7ab01db497e01f2fd
-
SHA1
89b82c1f29049d127955f14e50a01639bb1f7eba
-
SHA256
e9015625531d66ae12491251797e63970d5c94a30799f28a755b3a5854abba77
-
SHA512
b8484a168276eece77de548ab382590d448da6dd3cfd11da1027b487010a341a8351cb19f1dcd8ea4c534745a5c7840ac43d0c2f75061ecf19f65065b1d4a1c8
-
SSDEEP
384:LBjiYp4Xs9h+ZNDtfg2DwspkIBoZbC2NjGHsB3:1jiYp4c9hgNgkwspkIHeSM3
Malware Config
Signatures
Files
-
e9015625531d66ae12491251797e63970d5c94a30799f28a755b3a5854abba77.exe windows x86
c24719990369b8d43c2487166ff20918
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCreateKeyA
RegSetValueExA
gdi32
CreateBrushIndirect
GetStockObject
kernel32
AddAtomA
Beep
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
rand
signal
strcat
system
shell32
ShellExecuteA
user32
BlockInput
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
LoadImageA
MessageBoxA
PostQuitMessage
RegisterClassExA
ShowCursor
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 464B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE