Static task
static1
Behavioral task
behavioral1
Sample
e5b0c5375644e79832b60abe7e1af8e6962b4c18038ad56eda5e624af284de8d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e5b0c5375644e79832b60abe7e1af8e6962b4c18038ad56eda5e624af284de8d.exe
Resource
win10v2004-20230220-en
General
-
Target
e5b0c5375644e79832b60abe7e1af8e6962b4c18038ad56eda5e624af284de8d
-
Size
1.8MB
-
MD5
4f85a906eeac26daa2ad8076413f7003
-
SHA1
73544b70ee36c5202ece432db3b4bb874b213b2f
-
SHA256
e5b0c5375644e79832b60abe7e1af8e6962b4c18038ad56eda5e624af284de8d
-
SHA512
9b6f989fb9c81bc667a78689f20b7d9c1e568483869d4ee7b4aa3e1faa96ebb838c7a7ccc46c896cb0ba6cb4f3b5fdc8b5a8f56f6b3163e65380b64bf36c2b56
-
SSDEEP
12288:eCECeQAcWOdiRCmC8CKCeCVCDC7CiCjYCp:jZY0iE7BnjAGOvjVp
Malware Config
Signatures
Files
-
e5b0c5375644e79832b60abe7e1af8e6962b4c18038ad56eda5e624af284de8d.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ