Static task
static1
Behavioral task
behavioral1
Sample
eufive_20220223-141225.exe
Resource
win7-en-20211208
General
-
Target
eufive_20220223-141225
-
Size
659KB
-
MD5
7e86d9fc6b1cf08b82b692d893c05f36
-
SHA1
5af950b7706ca6e7158d5ef486e20c5609fd14d0
-
SHA256
5881b4236ed90b61498c527b0798c7d8591de80ff64bc9b9ec993ca712497b00
-
SHA512
584ec431354cc901f184c4105338005f0d67f14d7c5cfe1935f0de556c60ddf4e0d9fa68e2a61b519c97cd73acbb02dbfdd6d48de20978eaed00a1efe85095a4
-
SSDEEP
12288:czpmL9nFvnQiKPTKqaUin+mjmOQfQXfk9w365fqWyiRzHE:FFvnQd7Za/PjMOfkwIzFE
Malware Config
Signatures
Files
-
eufive_20220223-141225.exe windows x86
32f2c538eab8007c123c6eaeceead9e9
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetComputerNameExA
WriteProfileSectionA
GetNumaProcessorNode
FindFirstVolumeA
SetConsoleCursorInfo
HeapUnlock
FindFirstChangeNotificationA
WaitForSingleObject
GetNamedPipeHandleStateW
FileTimeToDosDateTime
EnumResourceTypesW
EnumResourceNamesW
ExitProcess
TerminateProcess
ActivateActCtx
GetVersionExA
VerifyVersionInfoW
SetConsoleOutputCP
ResetEvent
FindNextFileW
GetCompressedFileSizeW
CopyFileExA
ReadConsoleOutputCharacterA
GetDefaultCommConfigW
VerLanguageNameA
_hread
SetCommConfig
WritePrivateProfileStructA
FreeEnvironmentStringsW
CreateTimerQueueTimer
FindVolumeClose
LeaveCriticalSection
WriteConsoleInputA
TlsGetValue
SetComputerNameExW
FindAtomA
ReleaseMutex
LocalUnlock
CallNamedPipeW
BuildCommDCBAndTimeoutsA
LocalAlloc
GetCommandLineA
InterlockedIncrement
CopyFileW
AddRefActCtx
OutputDebugStringW
FormatMessageW
GetPriorityClass
WritePrivateProfileStringW
GetSystemDefaultLangID
TerminateThread
GlobalUnfix
GetVersionExW
HeapValidate
_hwrite
GetWindowsDirectoryW
GetStartupInfoA
CreatePipe
GetCPInfoExW
GetSystemWindowsDirectoryW
GetSystemWow64DirectoryA
GetLastError
GetCalendarInfoW
WaitForDebugEvent
GetTickCount
DeleteVolumeMountPointW
OpenFileMappingA
CopyFileA
CreateActCtxW
SetMailslotInfo
AddConsoleAliasW
GetPrivateProfileIntW
ReadConsoleInputW
InterlockedDecrement
DefineDosDeviceA
SetVolumeMountPointA
SetThreadIdealProcessor
SetConsoleActiveScreenBuffer
SetProcessAffinityMask
SetThreadContext
GetLongPathNameW
SetConsoleTextAttribute
EndUpdateResourceW
ContinueDebugEvent
MoveFileW
ReadConsoleA
WriteConsoleA
VirtualProtect
InterlockedFlushSList
WritePrivateProfileSectionA
DeleteCriticalSection
GetPrivateProfileSectionNamesA
GetDriveTypeA
GetFileAttributesExA
LocalFileTimeToFileTime
GetVolumePathNameW
GetConsoleMode
HeapSetInformation
GetComputerNameW
FindActCtxSectionStringA
ReadProcessMemory
MoveFileExW
GetProcAddress
GlobalFix
WriteConsoleInputW
GlobalDeleteAtom
GetEnvironmentStrings
InterlockedCompareExchange
WaitNamedPipeW
GetExitCodeProcess
GetSystemTime
GetLocalTime
EnumCalendarInfoExA
OpenSemaphoreW
FreeEnvironmentStringsA
CreateIoCompletionPort
GetPrivateProfileStringA
GetPrivateProfileStructW
GetMailslotInfo
GetCommModemStatus
lstrcpyA
HeapWalk
LockFile
EndUpdateResourceA
VerSetConditionMask
GetConsoleCP
GetConsoleAliasW
GetNumberOfConsoleInputEvents
GetProfileStringA
GetQueuedCompletionStatus
AllocConsole
FindAtomW
GetNumaNodeProcessorMask
GetConsoleAliasExesLengthA
CreateMailslotA
EnumDateFormatsW
SetCommState
FileTimeToLocalFileTime
IsDebuggerPresent
GetSystemTimeAdjustment
_lread
GetConsoleAliasExesLengthW
GetWriteWatch
LoadLibraryW
GetPrivateProfileStringW
GetModuleHandleA
ReadConsoleOutputAttribute
GetFileInformationByHandle
GetProfileStringW
MoveFileA
CreateActCtxA
SetCommMask
SetMessageWaitingIndicator
AreFileApisANSI
OpenWaitableTimerW
GetProcessShutdownParameters
PeekNamedPipe
FillConsoleOutputCharacterA
FindNextVolumeMountPointA
GetThreadPriority
DeleteAtom
AddAtomW
WriteConsoleOutputCharacterA
QueryDosDeviceW
GetConsoleAliasExesW
GetBinaryTypeA
DeleteFileA
RaiseException
IsBadReadPtr
EnterCriticalSection
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
GetModuleHandleW
Sleep
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleOutputCP
ReadFile
CreateFileA
user32
OemToCharW
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 431KB - Virtual size: 950KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ