Static task
static1
Behavioral task
behavioral1
Sample
ea9d5588dda39171ea55a3866491cec0677cef8be3683b75729a1a2c871b4ce4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea9d5588dda39171ea55a3866491cec0677cef8be3683b75729a1a2c871b4ce4.exe
Resource
win10v2004-20220901-en
General
-
Target
ea9d5588dda39171ea55a3866491cec0677cef8be3683b75729a1a2c871b4ce4
-
Size
24KB
-
MD5
4ca09743c2e42ef9eb8855285558631a
-
SHA1
986700a6c894f8014dcf7a4831a9230cacb165b8
-
SHA256
ea9d5588dda39171ea55a3866491cec0677cef8be3683b75729a1a2c871b4ce4
-
SHA512
05efab82ac2a2bddbfb26eed136ff91f67c8e42d1ddbd6cfca5083402a30b1abcaf1c2fdafb3a69c6fb420b32445ea6a870da94fb3797a8d39ca1d0cb95f296a
-
SSDEEP
384:Cqh/FdZHtF7QRgtotlZIcjPbIDDlfUqAhrvNJfXIOtaJ2U0SJR6P:C0/Fdt7QqotZD4lLAt1JPIOtpS36P
Malware Config
Signatures
Files
-
ea9d5588dda39171ea55a3866491cec0677cef8be3683b75729a1a2c871b4ce4.exe windows x86
681a6849b1c8aec6a93f8749d33e55c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseDesktop
DrawStateA
FlashWindow
urlmon
IsValidURL
CreateAsyncBindCtx
DllCanUnloadNow
IsAsyncMoniker
ZonesReInit
IsValidURL
URLDownloadW
wsock32
htons
sethostname
WSAStartup
ioctlsocket
bind
htonl
SetServiceA
gethostbyaddr
listen
Sections
.text Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE