Static task
static1
Behavioral task
behavioral1
Sample
e41641be1db25ca361386d695e20070ee8f0862686d2e191e48e6e816d2f1c56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e41641be1db25ca361386d695e20070ee8f0862686d2e191e48e6e816d2f1c56.exe
Resource
win10v2004-20220901-en
General
-
Target
e41641be1db25ca361386d695e20070ee8f0862686d2e191e48e6e816d2f1c56
-
Size
110KB
-
MD5
b93508b2b598016227e3d34cde6798cc
-
SHA1
aa4025138f3a3bfdb34d003c64f4e8057fefb481
-
SHA256
e41641be1db25ca361386d695e20070ee8f0862686d2e191e48e6e816d2f1c56
-
SHA512
d2773efa9453111650175b70fb15f37e28d9b1fa11fbb2a50179e6b67082a336d868d44ea404bb24fb303faf1c223dd4515289b0c3730a479faff3ecd1047840
-
SSDEEP
3072:+SQYvXp+/Mt+dsyT5sQL7CUJLLIXXjv/mb:+FYvXp8M4LT5sQpJiLg
Malware Config
Signatures
Files
-
e41641be1db25ca361386d695e20070ee8f0862686d2e191e48e6e816d2f1c56.exe windows x86
171da1bd49069fe1329388e142224b47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
comctl32
_TrackMouseEvent
shlwapi
StrToInt64ExW
msimg32
AlphaBlend
wininet
InternetReadFile
user32
FillRect
gdi32
CreateDIBitmap
advapi32
RegCloseKey
shell32
CommandLineToArgvW
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 75KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE