Static task
static1
Behavioral task
behavioral1
Sample
e4494ab230ed605c35ea8f5c5aec0a473dbcae123348743972b8009aedefb9ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4494ab230ed605c35ea8f5c5aec0a473dbcae123348743972b8009aedefb9ea.exe
Resource
win10v2004-20221111-en
General
-
Target
e4494ab230ed605c35ea8f5c5aec0a473dbcae123348743972b8009aedefb9ea
-
Size
276KB
-
MD5
0dff6784c92a29bb2a6cc3647b879add
-
SHA1
ff2e03bcd3d0db595d8727d2c11476ba69716316
-
SHA256
e4494ab230ed605c35ea8f5c5aec0a473dbcae123348743972b8009aedefb9ea
-
SHA512
4666950ce49eacc0c7c8d9383c1b51e3b837410057c1a2763b0a6cdb76e5a2c5c69b5b76d2bb09f223baed20adb7bd20151749f770b7d09cdd5e0dc80a8ee3a5
-
SSDEEP
6144:98GuQwlyktxxAGm8xBsZsZVBEwB18QpifQ7p:9FutPmDylb1r77p
Malware Config
Signatures
Files
-
e4494ab230ed605c35ea8f5c5aec0a473dbcae123348743972b8009aedefb9ea.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ