Static task
static1
Behavioral task
behavioral1
Sample
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe
Resource
win10v2004-20220812-en
General
-
Target
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62
-
Size
163KB
-
MD5
894c94298da133668550e1e46c117a83
-
SHA1
1f618e9f55140b73cf15b46601337990d3cd61b8
-
SHA256
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62
-
SHA512
1f03001927a3f6713ff3a2f4af8f91fdf5cfb039a1632ccf37f062797b6902b55d36b496025b500c2247fd6c8bd53573ecb5e1004f26b723f778873ed2a50cde
-
SSDEEP
3072:r8iTEN1vyO401ppJFojnjgJUpGpOydEXRZuiJDNkuNHnmz0+iausLQp:AiTEL6O40FsjjsUTydExJDN9NH9aVLQp
Malware Config
Signatures
Files
-
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe windows x86
4fbbac88c946305970a4d43cf012df85
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
EnumResourceLanguagesA
ExitProcess
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetPrivateProfileStringA
GetStartupInfoA
GetVersionExA
HeapAlloc
MultiByteToWideChar
QueryPerformanceCounter
RemoveDirectoryA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsSetValue
lstrcmpiA
lstrlenA
user32
LoadImageA
MessageBoxA
ShowOwnedPopups
CopyRect
advapi32
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegCloseKey
ole32
OleInitialize
OleUninitialize
CoUninitialize
CoTaskMemAlloc
CoRegisterClassObject
CoCreateInstance
CoGetClassObject
CoInitialize
wininet
InternetGetCookieA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetSetOptionExA
InternetCrackUrlA
InternetConnectA
InternetCloseHandle
InternetCanonicalizeUrlA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
shell32
SHGetMalloc
SHGetFileInfoA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteExW
SHGetDesktopFolder
Sections
.text Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ