Static task
static1
Behavioral task
behavioral1
Sample
eaf5305c5497a807914013ad79932c532d456886218e7f4f87cc5125d615f7c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaf5305c5497a807914013ad79932c532d456886218e7f4f87cc5125d615f7c6.exe
Resource
win10v2004-20220812-en
General
-
Target
eaf5305c5497a807914013ad79932c532d456886218e7f4f87cc5125d615f7c6
-
Size
1022KB
-
MD5
e37fbd4d2a16d2340b04bc9992732426
-
SHA1
68532ba9ed84d541b24b95bb452e966764cddd37
-
SHA256
eaf5305c5497a807914013ad79932c532d456886218e7f4f87cc5125d615f7c6
-
SHA512
3fdb889ad9987f7b066334dd1fa51b9d920ab9891c27b1f40aac930761b8dab37c9047e757a4c42722ec56ede1a244b564a06b22fcc5a1e813ef0eb1de2322ba
-
SSDEEP
24576:r9W5pz2SNZAghOTXoMJX4cYMkj7xJSF6JuRxDepuIr4lff:r9W5DZAghOTXvJX4cY76FHR9eTuff
Malware Config
Signatures
Files
-
eaf5305c5497a807914013ad79932c532d456886218e7f4f87cc5125d615f7c6.exe windows x86
56852166ef3a63047f3701f86e9b546d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
CreateEventA
FreeLibrary
lstrlenA
LocalFree
gdi32
SetBkMode
SelectObject
LineTo
MoveToEx
SetPixel
GetBkColor
DeleteObject
GetTextMetricsA
GetTextColor
PatBlt
user32
GetSysColor
GetClientRect
EndPaint
GetMessageA
ScreenToClient
DispatchMessageA
CreateWindowExA
msvcrt
_adjust_fdiv
toupper
wcstoul
__p__fmode
memmove
exit
__p__commode
Sections
.text Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1019B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 415B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1016KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ