Static task
static1
Behavioral task
behavioral1
Sample
e4daea708b939434b189564c5bac3e3b66809a57331d0ea85affc08f671bd6ad.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4daea708b939434b189564c5bac3e3b66809a57331d0ea85affc08f671bd6ad.exe
Resource
win10v2004-20220901-en
General
-
Target
e4daea708b939434b189564c5bac3e3b66809a57331d0ea85affc08f671bd6ad
-
Size
1.5MB
-
MD5
b1b1ea962700a439f3ee441cbeb39b52
-
SHA1
6480356c8d813ffd38972ffb2aa44db4b703c768
-
SHA256
e4daea708b939434b189564c5bac3e3b66809a57331d0ea85affc08f671bd6ad
-
SHA512
08563aa3655796b84f9ee86de58b73cecacb6e952719ff5fc8309dbd63c6fb1708edec4d1794c1d614c69843171cfa2f3ff6a6dff0da2b9375a697bd7c8993cd
-
SSDEEP
24576:JJtfFf7XXUlzryZFAYUMEyaLJ4x/0AGNE8s8A1irV/TEVVmcWOzVeUVckyGiC:Ltdf7YzUAY2G/ImAA1QsVcgi
Malware Config
Signatures
Files
-
e4daea708b939434b189564c5bac3e3b66809a57331d0ea85affc08f671bd6ad.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 720KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lpobegem Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ztcjjadt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE