Static task
static1
Behavioral task
behavioral1
Sample
eb0d7ddbe9246990e46bd31bd9a5c797acf3eab642a5d222f3a71d150e17125c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb0d7ddbe9246990e46bd31bd9a5c797acf3eab642a5d222f3a71d150e17125c.exe
Resource
win10v2004-20220901-en
General
-
Target
eb0d7ddbe9246990e46bd31bd9a5c797acf3eab642a5d222f3a71d150e17125c
-
Size
478KB
-
MD5
c64df13b4e78f58fa8791b26118884cf
-
SHA1
b59f0a0c9bfa6d0dbca7aa751e1e0c843e78b930
-
SHA256
eb0d7ddbe9246990e46bd31bd9a5c797acf3eab642a5d222f3a71d150e17125c
-
SHA512
013a9749ec8cb3d076d98ffac1501913608461c4ec8f8be867ea14424d276b5decb5bf799d41c3491e9cabc5d0cf5cb165489ca65d76ad22902a346accec4804
-
SSDEEP
12288:gc1eGQLRW5fPfk0HYt7I3ghXpo9bZVaLgH/:iGQL0JPfTHYNI3BdoM
Malware Config
Signatures
Files
-
eb0d7ddbe9246990e46bd31bd9a5c797acf3eab642a5d222f3a71d150e17125c.exe windows x86
fd5cfde5592fd7d626f2914efe793c8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
SetLastError
UnhandledExceptionFilter
GetStartupInfoW
GetProcAddress
InitializeCriticalSection
HeapReAlloc
WriteFile
GetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
GetEnvironmentStringsW
TlsAlloc
SetHandleCount
GetModuleHandleA
GetCurrentThread
GetFileTime
FreeEnvironmentStringsW
InterlockedExchange
TlsSetValue
GetLastError
HeapCreate
TlsGetValue
GetStartupInfoA
GetEnvironmentStrings
GetFileType
GetCommandLineW
WaitNamedPipeW
ExitProcess
GetTickCount
GetCommandLineA
EnterCriticalSection
HeapFree
LeaveCriticalSection
GetModuleFileNameA
DuplicateHandle
LoadLibraryA
QueryPerformanceCounter
IsBadWritePtr
VirtualAlloc
DeleteCriticalSection
GetVersion
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
MultiByteToWideChar
TlsFree
VirtualFree
HeapDestroy
FreeEnvironmentStringsA
wininet
HttpSendRequestW
FtpRemoveDirectoryW
SetUrlCacheHeaderData
InternetSetCookieW
InternetAlgIdToStringW
InternetReadFileExA
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 365KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ