Static task
static1
Behavioral task
behavioral1
Sample
ea9aaeec4e10a011745f3ad12ff06724b55b48ad5f2138c5c128f7b84c41972b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea9aaeec4e10a011745f3ad12ff06724b55b48ad5f2138c5c128f7b84c41972b.exe
Resource
win10v2004-20220901-en
General
-
Target
ea9aaeec4e10a011745f3ad12ff06724b55b48ad5f2138c5c128f7b84c41972b
-
Size
218KB
-
MD5
af6b61453b98c018cd633437a3ac950c
-
SHA1
72c00dd1d00f40167ac43a5b72291b2f4ec2a547
-
SHA256
ea9aaeec4e10a011745f3ad12ff06724b55b48ad5f2138c5c128f7b84c41972b
-
SHA512
957453d35ff291b570128eeb97eb98ebb836717e92775c49b7ec94be387c905a36fa6f09f836133e6737eb8f0c789b846123a4921e56ff43e21afa181074de33
-
SSDEEP
3072:rfLXz74krAzS8KfmzOqgSViakEpeMyyxvJxizXg3lZjbIY2E4to7GOYuJi1713RL:rfRrs75O8iaEc7jF2vqY6i10dGt
Malware Config
Signatures
Files
-
ea9aaeec4e10a011745f3ad12ff06724b55b48ad5f2138c5c128f7b84c41972b.exe windows x86
7ac84b4b3260f229487eda282b26eb6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shlwapi
SHStrDupA
PathIsDirectoryA
SHEnumValueA
PathGetCharTypeA
PathFileExistsA
SHGetValueA
PathIsContentTypeA
SHQueryValueExA
SHDeleteKeyA
SHQueryInfoKeyA
kernel32
GetCommandLineA
VirtualAlloc
lstrlenW
LoadLibraryExA
GetVersionExA
ExitThread
IsBadHugeReadPtr
GetModuleHandleA
GetProcAddress
GetCommandLineW
GetACP
ExitProcess
GetLastError
comctl32
ImageList_Create
ImageList_Draw
ImageList_DrawEx
ImageList_Add
ImageList_DragShowNolock
ImageList_Remove
ImageList_Read
user32
EmptyClipboard
GetKeyboardType
SetPropA
IsRectEmpty
PeekMessageW
MapVirtualKeyA
SetMenu
SetWindowPlacement
SetScrollPos
WaitMessage
LoadCursorA
LoadKeyboardLayoutA
CharNextA
SetClipboardData
DestroyCursor
SetWindowLongW
FindWindowA
GetWindowLongA
GetKeyboardLayout
ActivateKeyboardLayout
GetMenuItemCount
ShowWindow
GetDC
CreateWindowExA
SetTimer
SetScrollRange
GetSubMenu
SetWindowTextA
GetFocus
GetMenuStringA
MsgWaitForMultipleObjects
SetMenuItemInfoA
CharUpperBuffA
RemovePropA
wsprintfA
GetIconInfo
GetMessagePos
DestroyIcon
ReleaseCapture
MessageBoxA
GetClassNameA
UpdateWindow
ScrollWindow
RegisterClipboardFormatA
SendMessageW
CharToOemA
MapWindowPoints
GetDCEx
CloseClipboard
DestroyWindow
GetMenuItemID
DispatchMessageA
DrawIcon
GetForegroundWindow
PtInRect
SendMessageA
DeleteMenu
IsIconic
DrawTextA
SetWindowLongA
WindowFromPoint
GetWindowLongW
ShowOwnedPopups
GetWindowPlacement
SetCursor
GetWindowRect
GetCapture
CheckMenuItem
TranslateMessage
SetCapture
EnumChildWindows
UnhookWindowsHookEx
DrawAnimatedRects
IsWindowVisible
DrawFrameControl
GetKeyNameTextA
CreateIcon
ReleaseDC
GetActiveWindow
EndPaint
InflateRect
DispatchMessageW
ShowScrollBar
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES5 Size: 1024B - Virtual size: 647B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ