Static task
static1
Behavioral task
behavioral1
Sample
e5b8eb8a4cfcf9061df5f9dd96f7ea497bf15f1271c249266f9b52ce802ba5d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5b8eb8a4cfcf9061df5f9dd96f7ea497bf15f1271c249266f9b52ce802ba5d6.exe
Resource
win10v2004-20221111-en
General
-
Target
e5b8eb8a4cfcf9061df5f9dd96f7ea497bf15f1271c249266f9b52ce802ba5d6
-
Size
4.7MB
-
MD5
bbc00708757857ac7b4c1c4dedf3770a
-
SHA1
987489cf41bb4a69a44c27ea9f4fcccf12eabdbe
-
SHA256
e5b8eb8a4cfcf9061df5f9dd96f7ea497bf15f1271c249266f9b52ce802ba5d6
-
SHA512
fc481b564ba6d0920f0ef739d457460f5cd6ec5653cea388949f0396ce0563f22b0cc0617b159b25187a4f2048da34e970258133dde0e59fd838158a8615cf46
-
SSDEEP
98304:BF+PbkKIP4hJTrFF1zt99MrxR1R6QIbIh1MeNTWU0DYQNIamz2:4b3/Br3M1RdI0TVQD3BG2
Malware Config
Signatures
Files
-
e5b8eb8a4cfcf9061df5f9dd96f7ea497bf15f1271c249266f9b52ce802ba5d6.exe windows x86
1dc21a9062c6660687d9d20d24462bba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
waveOutRestart
ws2_32
gethostname
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
kernel32
QueryPerformanceFrequency
user32
LoadStringA
gdi32
CreateBrushIndirect
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
_TrackMouseEvent
wininet
InternetConnectA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 2.7MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ