Static task
static1
Behavioral task
behavioral1
Sample
eeb4645f23f84d8aece99cb4bdb32f735e69582e5f84c451d87d1e2e21d1a5fa.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
eeb4645f23f84d8aece99cb4bdb32f735e69582e5f84c451d87d1e2e21d1a5fa.exe
Resource
win10v2004-en-20220112
General
-
Target
eeb4645f23f84d8aece99cb4bdb32f735e69582e5f84c451d87d1e2e21d1a5fa
-
Size
502KB
-
MD5
98ae6e7fbcd391e42a2a36b7bd53f99e
-
SHA1
9bf453f13814727bb17a3fe2e33de9886c059135
-
SHA256
eeb4645f23f84d8aece99cb4bdb32f735e69582e5f84c451d87d1e2e21d1a5fa
-
SHA512
ff23798583f689fc0a94409ef9fa87447e26f39570a32df2c02cb390ef2828269f9b6bf2a46fb0a8a0f809344d2955a0143ce3776d852282ab8c85b385e4f89e
-
SSDEEP
6144:RjkzwwtlG/HzP2v1vxT/7kv3tEHHCba9PH26rhJ7Ph5IYcpPE3YuHvzoEAFM8DQ:Rjl/L2vPT2a9PH2CLUFE3HHJhUz+
Malware Config
Signatures
Files
-
eeb4645f23f84d8aece99cb4bdb32f735e69582e5f84c451d87d1e2e21d1a5fa.exe windows x86
50514e98aea891db18f88e586fa66a3e
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
OpenFile
TerminateProcess
Wow64SetThreadContext
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcess
rpcrt4
UuidToStringW
NdrServerCall2
winmm
mixerSetControlDetails
ole32
CoRevokeInitializeSpy
gdi32
GetCurrentObject
advapi32
QueryServiceObjectSecurity
msvcrt
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_exit
_amsg_exit
_initterm
_cexit
__getmainargs
strspn
clearerr
memset
_acmdln
exit
_ismbblead
_XcptFilter
__setusermatherr
user32
IsHungAppWindow
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 467KB - Virtual size: 467KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ