Static task
static1
Behavioral task
behavioral1
Sample
e2251327c14daad30059f61c63c7b1f88189db2978350bed49b27ceec2172536.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2251327c14daad30059f61c63c7b1f88189db2978350bed49b27ceec2172536.exe
Resource
win10v2004-20220812-en
General
-
Target
e2251327c14daad30059f61c63c7b1f88189db2978350bed49b27ceec2172536
-
Size
638KB
-
MD5
e7031829a40531e083cc84fb4ffbf8e1
-
SHA1
b4d1e004d09fa6dac416ef9cbe36d3d41214d922
-
SHA256
e2251327c14daad30059f61c63c7b1f88189db2978350bed49b27ceec2172536
-
SHA512
c054c726e939821e1813e412f8c4f1fe2741bec3b845c01a5decd9c011ba0a834aee2ca8a9d60323f93e16c6487c6652dae38340626101c28823b7cadfd1918b
-
SSDEEP
12288:m6mhoYV8ifoZ/o/YloIQXuD7Rot+C9XFdiN6GOno1SNYaa/WHJkxAkMUR:8p3YlxsmRoMbEw1SNi/WHQ5MK
Malware Config
Signatures
Files
-
e2251327c14daad30059f61c63c7b1f88189db2978350bed49b27ceec2172536.exe windows x86
11729dd4d6e2bd199f792fb2626a9e77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetConsoleCP
CompareFileTime
SuspendThread
GetTickCount
CloseHandle
GetSystemDefaultLangID
GetModuleHandleA
GetProfileIntA
InterlockedExchange
AddAtomA
WaitForSingleObject
GetStdHandle
LoadLibraryExA
lstrlenA
WaitForMultipleObjects
HeapCreate
GlobalUnlock
VirtualProtect
GetVersion
GetCommandLineA
user32
GetDlgItem
CreateCursor
InsertMenuA
MessageBoxA
EnableScrollBar
SetWindowPos
GetKeyState
DialogBoxParamA
DestroyMenu
GetKeyboardLayout
DispatchMessageA
PostMessageA
SubtractRect
TranslateMessage
UpdateWindow
SetPropA
GetMenuStringA
ShowWindow
ModifyMenuA
FindWindowA
EqualRect
GetWindowTextA
CopyRect
CreateCaret
PaintDesktop
atl
AtlModuleInit
AtlSetErrorInfo
AtlAdvise
AtlGetVersion
AtlUnadvise
dnsapi
DnsStatusString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ