Static task
static1
Behavioral task
behavioral1
Sample
e688a96a257d41f3a42603a3f3a64f14555d53ab8ffa7e320319bafe54201f8a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e688a96a257d41f3a42603a3f3a64f14555d53ab8ffa7e320319bafe54201f8a.exe
Resource
win10v2004-20221111-en
General
-
Target
e688a96a257d41f3a42603a3f3a64f14555d53ab8ffa7e320319bafe54201f8a
-
Size
443KB
-
MD5
fb3048db7201cda735709ca0d6097654
-
SHA1
e4c372822c5c85059a0b1e8e7e758a94fb64ba05
-
SHA256
e688a96a257d41f3a42603a3f3a64f14555d53ab8ffa7e320319bafe54201f8a
-
SHA512
87bcefec00ed1febbe1bb221c25bb2625759e30f04104540504b8235027321343ee493bd13f5b31ef59f008f10e9599e59c8994a531cd2a3a950abc45d68fff7
-
SSDEEP
12288:mLbnpI5rVmz3hlXKXTETsldoImRwWxG1KiVCPJ1f:8pItVmz3hZKjETeTmR9xG1KCqv
Malware Config
Signatures
Files
-
e688a96a257d41f3a42603a3f3a64f14555d53ab8ffa7e320319bafe54201f8a.exe windows x86
05440003252a4505f1fe697d461ada18
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
winmm
waveOutSetVolume
Sections
.text Size: 23KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE