Static task
static1
Behavioral task
behavioral1
Sample
e277540745777a980ad10763d44d8475c9dd2dde5a7710fe74b0d1cb6bf7225d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e277540745777a980ad10763d44d8475c9dd2dde5a7710fe74b0d1cb6bf7225d.exe
Resource
win10v2004-20220812-en
General
-
Target
e277540745777a980ad10763d44d8475c9dd2dde5a7710fe74b0d1cb6bf7225d
-
Size
262KB
-
MD5
e70e2dae4787f5b62b001057d82246f3
-
SHA1
41e703677eadf5faa3f9c3a1bc69941f6410aa02
-
SHA256
e277540745777a980ad10763d44d8475c9dd2dde5a7710fe74b0d1cb6bf7225d
-
SHA512
2fc1b7620672b62bb54123045dd9b9374b5d9e270c1a5bd2c838cf7e32a2a9bb8544000866afb405e3f34fe4e65ca5503281c3045a2765f587a5fc2ec3ad1dea
-
SSDEEP
6144:fGhwy0QV0LFmyr8/dYbswisS3v2wqNNbFtAio4w1qJ:fGhwTLsX/+SelNNb3AiWS
Malware Config
Signatures
Files
-
e277540745777a980ad10763d44d8475c9dd2dde5a7710fe74b0d1cb6bf7225d.exe windows x86
e4f87939d0f8d4181c280d7da879e5d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
UnregisterClassW
gdi32
IntersectClipRect
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
advapi32
RegDeleteValueW
shell32
SHGetFileInfoW
comctl32
InitCommonControlsEx
shlwapi
PathIsUNCW
ole32
CoCreateInstance
oleaut32
VariantInit
Sections
.text Size: 245KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE