Static task
static1
Behavioral task
behavioral1
Sample
ea9e664678c7fc291a066003d56d14d3da747110ec6ca3ba3b9910cc60f52714.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea9e664678c7fc291a066003d56d14d3da747110ec6ca3ba3b9910cc60f52714.exe
Resource
win10v2004-20220812-en
General
-
Target
ea9e664678c7fc291a066003d56d14d3da747110ec6ca3ba3b9910cc60f52714
-
Size
13KB
-
MD5
e73628eae72e81514be7e58e0a951b11
-
SHA1
358884c5ecd52236cdb77b47864a29397c30e237
-
SHA256
ea9e664678c7fc291a066003d56d14d3da747110ec6ca3ba3b9910cc60f52714
-
SHA512
eb5c35c19c61dd73baea2fe9e30f2c6bcfda70ad8b30dc46947f685804d498e0d7fba30e25d72f4261b39f92fa9738e4643a784e1b4bf57a18bccaea818c01e7
-
SSDEEP
384:6qavynNqQR8pI1i+cKjVycD4PWKvKtVrcpCHbbHD:6aNqE86Y+cKjVyRKtdcpCHbTD
Malware Config
Signatures
Files
-
ea9e664678c7fc291a066003d56d14d3da747110ec6ca3ba3b9910cc60f52714.exe windows x86
642616cc6f9d009ddbbcddd55d42de4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
lstrcatA
WaitForMultipleObjects
WaitForSingleObject
GetProcAddress
CreateEventA
SetFilePointer
lstrlenA
GetModuleFileNameA
CreateFileA
ReadFile
WriteFile
CloseHandle
HeapAlloc
HeapReAlloc
lstrcpyA
GetTempPathA
GetFileAttributesA
OpenEventW
GetProcessHeap
DeleteFileA
FreeLibrary
RtlUnwind
GetCommandLineA
ExitProcess
HeapFree
GetUserDefaultLCID
SetEvent
GetSystemDefaultLCID
Sleep
ExitThread
GetVersionExA
CreateThread
LoadLibraryA
user32
PeekMessageA
CreateWindowExA
TranslateMessage
DispatchMessageA
DestroyWindow
CharToOemA
wsprintfW
wsprintfA
MsgWaitForMultipleObjects
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
SHGetFolderPathA
wininet
HttpOpenRequestA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE