Static task
static1
Behavioral task
behavioral1
Sample
e0dbcba8150566d122d42f025aa12d389c47d091f6ec17a091f930d0685c341c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e0dbcba8150566d122d42f025aa12d389c47d091f6ec17a091f930d0685c341c.exe
Resource
win10v2004-20220812-en
General
-
Target
e0dbcba8150566d122d42f025aa12d389c47d091f6ec17a091f930d0685c341c
-
Size
629KB
-
MD5
0645615f1432129328d6daf748d8794e
-
SHA1
bede4579e3cbaf39f6a324cb2ef89688b3294e06
-
SHA256
e0dbcba8150566d122d42f025aa12d389c47d091f6ec17a091f930d0685c341c
-
SHA512
8b264db5d1fd1830cb6ec892ae7a464f7e5b074aa8f28b0dceaf12f7a1b559991adfc3d23638d0a7f198e4958c3c85534523b32037aa676113b02f28ad29f2fa
-
SSDEEP
12288:kIpJqCfxDsmhGNG+KVN8eJ6fxYhHo4dj1r9xEgrhK:lJqCfV7GN1KVS2dBoIQcK
Malware Config
Signatures
Files
-
e0dbcba8150566d122d42f025aa12d389c47d091f6ec17a091f930d0685c341c.exe windows x86
0faefc4e44113778d8cb337aaea16079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
WaitForMultipleObjects
GetSystemDefaultLangID
SuspendThread
lstrlenA
WaitForSingleObject
VirtualProtect
GetCommandLineA
GetConsoleCP
GlobalUnlock
GetProfileIntA
CloseHandle
HeapCreate
CompareFileTime
AddAtomA
GetStdHandle
GetVersion
GetModuleHandleA
InterlockedExchange
HeapReAlloc
GetTickCount
user32
InvertRect
GetDlgItem
IsDialogMessage
MessageBoxA
GetKeyboardLayout
SetPropA
CreateMenu
DrawCaption
FindWindowA
GetCursorInfo
CreateCursor
DragObject
DestroyMenu
EnableScrollBar
SetWindowPos
CreateIcon
InsertMenuA
DispatchMessageA
GetKeyState
DialogBoxParamA
CreateCaret
SetScrollInfo
CopyRect
EqualRect
CopyImage
winmm
CloseDriver
aux32Message
auxGetVolume
OpenDriver
PlaySoundA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ