Static task
static1
Behavioral task
behavioral1
Sample
eaf18e20c366caf35d9f8bbb6908d5a6758f5998154e7a54f7a685d536398683.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaf18e20c366caf35d9f8bbb6908d5a6758f5998154e7a54f7a685d536398683.exe
Resource
win10v2004-20220812-en
General
-
Target
eaf18e20c366caf35d9f8bbb6908d5a6758f5998154e7a54f7a685d536398683
-
Size
157KB
-
MD5
2d349f6b523531dd46b7836c248dfb37
-
SHA1
8658e930a2ae5bad902b8d4f26cbb182df3f708a
-
SHA256
eaf18e20c366caf35d9f8bbb6908d5a6758f5998154e7a54f7a685d536398683
-
SHA512
171f961881ccfba0e282ff03d3124cf3811af9863aaecf6b02d4699b189ca2f735f2d73b7b9a7873c2ef3cb5de1323e2c6a09ac672df14185cb5312a698a8022
-
SSDEEP
3072:Da1Irtw8BDQSdlzwhxN5TQiQISf2e9bgS/tBOGTwue4Uqm:DJxV8qzw158LfBbgS/+GTptm
Malware Config
Signatures
Files
-
eaf18e20c366caf35d9f8bbb6908d5a6758f5998154e7a54f7a685d536398683.exe windows x86
fbcd56420fac13dbdbfc3a8f1d76c235
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumThreadWindows
SetWindowPos
GetScrollRange
IsMenu
GetCursorPos
IsDialogMessageA
IsChild
MessageBoxA
GetActiveWindow
GetPropA
FillRect
DefFrameProcA
TrackPopupMenu
GetClassLongA
GetParent
GetKeyNameTextA
GetCursor
FindWindowA
GetMenuItemInfoA
GetDC
GetMessagePos
CreateIcon
SetCursor
GetFocus
DrawTextA
GetDCEx
EnableMenuItem
SetTimer
ShowWindow
GetScrollInfo
IsWindowVisible
SystemParametersInfoA
CharNextA
GetKeyState
GetDlgItem
DefMDIChildProcA
GetMenuItemCount
GetIconInfo
GetLastActivePopup
GetCapture
kernel32
LockResource
SetEndOfFile
lstrcpyA
LocalReAlloc
GetDateFormatA
GetVersionExA
GetOEMCP
LocalAlloc
InitializeCriticalSection
GetFileAttributesA
GetModuleFileNameA
FindFirstFileA
MoveFileExA
lstrcatA
HeapDestroy
VirtualAlloc
GetLastError
GlobalAlloc
DeleteCriticalSection
WaitForSingleObject
VirtualQuery
HeapAlloc
LoadLibraryA
CompareStringA
GetTickCount
RaiseException
GetModuleHandleA
GetFileType
lstrcpynA
GetCurrentThreadId
GetFullPathNameA
EnumCalendarInfoA
FreeLibrary
GetLocaleInfoA
WideCharToMultiByte
CreateThread
GetStringTypeA
FindClose
HeapFree
GetCurrentProcessId
SetLastError
lstrlenA
ExitProcess
MoveFileA
GetCommandLineA
GetProcAddress
Sections
CODE Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 136KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE