Static task
static1
Behavioral task
behavioral1
Sample
e90c355c10fc70ce3ef5235a93cdf31df6946412dd16c2bdd718ea9c9c85f55f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e90c355c10fc70ce3ef5235a93cdf31df6946412dd16c2bdd718ea9c9c85f55f.exe
Resource
win10v2004-20230221-en
General
-
Target
e90c355c10fc70ce3ef5235a93cdf31df6946412dd16c2bdd718ea9c9c85f55f
-
Size
56KB
-
MD5
b6fbadbf9158aa1eedddff1a21241572
-
SHA1
1bb2a7201106de4e641dcc83aca3a9f390765716
-
SHA256
e90c355c10fc70ce3ef5235a93cdf31df6946412dd16c2bdd718ea9c9c85f55f
-
SHA512
d35266b3e2ac5a5bdf58f362299bbc25cb4f2f7ef2c540e094d8162cbac2da68e198a0b6555a8eb27d76e429234d8eeb8ba55126edcc5debfe791da634063920
-
SSDEEP
192:Jl8CzkpB1Z7l+EF6FJJROq2EKRdZMFu2tx+8dE3UzSYUrGuunKRdZMFu2tx+8dEV:JaEk7UpFVx1xq3UZU9w1xq3UZU9BI
Malware Config
Signatures
Files
-
e90c355c10fc70ce3ef5235a93cdf31df6946412dd16c2bdd718ea9c9c85f55f.exe windows x86
0b9e34a875586c838e2f571af0c3353a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
msvcr90
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ