Static task
static1
Behavioral task
behavioral1
Sample
e645313a4b39ab10ca400cda846c82b92f114efc25dbf2dbc2893fb617ee7d40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e645313a4b39ab10ca400cda846c82b92f114efc25dbf2dbc2893fb617ee7d40.exe
Resource
win10v2004-20220812-en
General
-
Target
e645313a4b39ab10ca400cda846c82b92f114efc25dbf2dbc2893fb617ee7d40
-
Size
138KB
-
MD5
fffe5d8d615c55141690ec94dc6bb69c
-
SHA1
a197d2d977a1698197efd9285d68b27c5bcd3830
-
SHA256
e645313a4b39ab10ca400cda846c82b92f114efc25dbf2dbc2893fb617ee7d40
-
SHA512
d536838143b90d9887f0258e71825be83533bb154c164c0e88213ef0d3cbb3f465e57def8639994736e4ab1648920cb017ed3c6e02897616de420ee8f2302322
-
SSDEEP
3072:mFdFKrCCLMJNakKCs9TTAvyNQeDlyjETp6GqF/z9HVS5dV8DtZ:mFdkZsIkKZxKcW23a7pVSyp
Malware Config
Signatures
Files
-
e645313a4b39ab10ca400cda846c82b92f114efc25dbf2dbc2893fb617ee7d40.exe windows x86
26a04c755e61bf0a0526b49ad95d47c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExW
PostMessageA
GetWindowPlacement
LoadCursorW
GetMessageW
GetSystemMetrics
DispatchMessageA
GetWindowTextA
OffsetRect
GetDlgItem
ShowWindow
PostQuitMessage
DrawFocusRect
InsertMenuW
FillRect
kernel32
GetEnvironmentStringsW
SetLastError
GetSystemTimeAsFileTime
LeaveCriticalSection
GetOEMCP
GetComputerNameW
FreeLibrary
IsBadWritePtr
VirtualAlloc
UnmapViewOfFile
GetLastError
Sleep
ExitProcess
GetFileAttributesA
OpenMutexA
QueryPerformanceCounter
GetCurrentProcessId
VirtualProtect
OpenMutexW
GetCurrentThreadId
GetThreadPriority
OpenEventA
GetFileSize
WaitForMultipleObjects
GetCommandLineW
GetTickCount
InitializeCriticalSection
LoadLibraryExA
lstrcpynA
GetCommandLineA
WaitForSingleObject
GetACP
GetDriveTypeW
GetConsoleMode
lstrcpyA
ResumeThread
GetStdHandle
HeapAlloc
GetExitCodeProcess
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbss Size: 512B - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ