Static task
static1
Behavioral task
behavioral1
Sample
eb07018a70aa26bc971f933c8d79bc9eaa36f60332828168656a037434e1ea5f.exe
Resource
win7-20220812-en
General
-
Target
eb07018a70aa26bc971f933c8d79bc9eaa36f60332828168656a037434e1ea5f
-
Size
270KB
-
MD5
d43e2baa9b46aa4d9b38de8f178724b7
-
SHA1
d1472dd951a51452f1f44e7ad5c45c8575db07a7
-
SHA256
eb07018a70aa26bc971f933c8d79bc9eaa36f60332828168656a037434e1ea5f
-
SHA512
0e8d2aff038f300707c46dcb6015693f04d09cb3091c5c40a5a7e0f729d3cfe12dc323a9b0127bff30faa02ebe3eb00ce3283d624035e7559af6d350d6f91d79
-
SSDEEP
6144:Eiv/OEYn4D7TVZT5v9yx6sS303r4oiga:jv/OEYn4zVZT51JT303I
Malware Config
Signatures
Files
-
eb07018a70aa26bc971f933c8d79bc9eaa36f60332828168656a037434e1ea5f.exe windows x86
e6b655d4ee21b0d15c28e60dd4c47ba3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringW
InterlockedDecrement
_lwrite
SetWaitableTimer
WaitNamedPipeA
BuildCommDCBW
GetConsoleAliasExesLengthW
PeekConsoleInputA
CreateFileW
FindNextFileW
EnumResourceTypesA
GetCPInfoExA
GetFirmwareEnvironmentVariableW
GetModuleFileNameA
BeginUpdateResourceA
DeleteFileW
WriteConsoleA
FillConsoleOutputCharacterW
WriteConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
GetSystemDefaultLangID
GetConsoleAliasA
FindNextChangeNotification
LocalReAlloc
RemoveDirectoryA
lstrcpynW
FindFirstFileExW
GetVolumeInformationW
GetCurrentDirectoryA
GetConsoleAliasesLengthW
SetConsoleTitleW
GetThreadLocale
GetCurrentProcess
OpenJobObjectA
_lopen
GetFileAttributesExW
CreateDirectoryExA
CloseHandle
RaiseException
RtlUnwind
GetLastError
HeapFree
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
IsProcessorFeaturePresent
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LoadLibraryW
LCMapStringW
GetStringTypeW
SetFilePointer
SetStdHandle
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleW
user32
ScreenToClient
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 159KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ