Static task
static1
Behavioral task
behavioral1
Sample
e06c2a01d2babc050f4b150748771afbe650df0c847de297ff5d2b7adaaac114.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e06c2a01d2babc050f4b150748771afbe650df0c847de297ff5d2b7adaaac114.exe
Resource
win10v2004-20231215-en
General
-
Target
e06c2a01d2babc050f4b150748771afbe650df0c847de297ff5d2b7adaaac114
-
Size
249KB
-
MD5
4127a99bc286a8e17bb84b9154a1e6e9
-
SHA1
4803c6474840e2aaaf9cb1eb6f31b866421b27fa
-
SHA256
e06c2a01d2babc050f4b150748771afbe650df0c847de297ff5d2b7adaaac114
-
SHA512
06b6850008c22b8fe6575ed5e70e77725f64128903a3e9c1f848a75d3f2a10e6c3d9786b2500f89de26e72ca2caff20caf3e2cae1d1dbf9ae1b5e6488b2efdf4
-
SSDEEP
3072:00uHKe5bvx3665lJ1uaNpejpIMRCV7fxMo48dfCw+1wajXm8bwU:wLNJB5l5NpeCvV7fxMqfCw+1Pj9wU
Malware Config
Signatures
Files
-
e06c2a01d2babc050f4b150748771afbe650df0c847de297ff5d2b7adaaac114.exe windows:4 windows x86 arch:x86
5ab8c1dde4fb8db3ae7c179c8a54eee5
Code Sign
1b:9b:ab:5b:ba:6f:31:70:bb:54:13:54:1f:f1:bc:21Certificate
IssuerCN=XYZNot Before12/08/2022, 09:37Not After31/12/2039, 23:59SubjectCN=XYZf4:09:30:1b:df:83:c3:33:be:e0:21:d1:11:49:a6:6d:dc:bb:fa:56Signer
Actual PE Digestf4:09:30:1b:df:83:c3:33:be:e0:21:d1:11:49:a6:6d:dc:bb:fa:56Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
CreateDirectoryW
CreateFileW
LocalFree
GetLongPathNameW
GetFileAttributesW
GetFileAttributesExW
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
OpenMutexA
GetLastError
CreateThread
GetStartupInfoA
CreateProcessA
GetModuleFileNameA
DeleteFileA
CloseHandle
user32
wvsprintfA
advapi32
SetSecurityInfo
SetEntriesInAclA
AllocateAndInitializeSid
FreeSid
GetSecurityInfo
shell32
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
msvcrt
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
memmove
_wfopen
fread
wcscat
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
strstr
time
fopen
fwrite
fclose
??3@YAXPAX@Z
__setusermatherr
msvcp60
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 220KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ