Static task
static1
Behavioral task
behavioral1
Sample
e84d6afadd9c82359496f83847a0c7cb192fd348ffccbc945111ab15b85cf361.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e84d6afadd9c82359496f83847a0c7cb192fd348ffccbc945111ab15b85cf361.exe
Resource
win10v2004-20221111-en
General
-
Target
e84d6afadd9c82359496f83847a0c7cb192fd348ffccbc945111ab15b85cf361
-
Size
175KB
-
MD5
6d344226b9373e1603d68f19b36ccdde
-
SHA1
117c2f88503af9c90bfcc540940b65734f0cc4f9
-
SHA256
e84d6afadd9c82359496f83847a0c7cb192fd348ffccbc945111ab15b85cf361
-
SHA512
c53cd0f328958cf0d4c838a4bff11f73afe367943990a7ff09cfdcf4d8c3c3b35f0d753d6bd4dbdf8140879034e48f08a4a93242e60643f60ce42d360c1f3859
-
SSDEEP
3072:AmXYoYtK6APljJXUrRJG0Z7iFl2JoX5ge2SA3fJT/5rzxk/mij/BXJJWq6TjG:bTPQGAimJoX5l23BT/1imij/Bn16Tj
Malware Config
Signatures
Files
-
e84d6afadd9c82359496f83847a0c7cb192fd348ffccbc945111ab15b85cf361.exe windows x86
622352f48981ec57469a38b2ad644f2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
GlobalAddAtomW
HeapAlloc
FindFirstFileA
GlobalFree
FindResourceExA
EnumResourceTypesA
EnumResourceLanguagesA
EnumResourceNamesA
RaiseException
GetProcAddress
FormatMessageA
GetCurrentDirectoryA
EnumResourceNamesA
SetLastError
GetProcessHeap
LoadLibraryW
InterlockedExchange
HeapFree
LocalFree
SizeofResource
GetCurrencyFormatA
GetLastError
GetCommandLineA
GetModuleHandleA
LoadResource
CloseHandle
MultiByteToWideChar
FindFirstFileW
LockResource
Sleep
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
user32
EnumWindows
wsprintfW
GetWindowThreadProcessId
IsWindowVisible
GetWindowTextA
wsprintfA
Sections
.text Size: 95KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ