Static task
static1
Behavioral task
behavioral1
Sample
eb05c450f3f0e75f01a80f334d28bea6a31c33e5ddc820d48fc438127e0b16f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb05c450f3f0e75f01a80f334d28bea6a31c33e5ddc820d48fc438127e0b16f9.exe
Resource
win10v2004-20220901-en
General
-
Target
eb05c450f3f0e75f01a80f334d28bea6a31c33e5ddc820d48fc438127e0b16f9
-
Size
415KB
-
MD5
896c2c55ff4456b1bc5afc9ee24c9221
-
SHA1
f559d0c211a941ef60b992468faea7f01d8f67d8
-
SHA256
eb05c450f3f0e75f01a80f334d28bea6a31c33e5ddc820d48fc438127e0b16f9
-
SHA512
0e1105d3e3a9661356838049b85aedce590840658de4e9131a7a5b82fd5fa490cae9da27d64d6405aa694ffb2753b3a27f38256eda3011a66d516af8548c42db
-
SSDEEP
12288:o/gS2T0wRPkTsH6K8fF590MouEEdas2Z7Ysln6CA8Kyb:o/6MsH98d590TsWUsd0S
Malware Config
Signatures
Files
-
eb05c450f3f0e75f01a80f334d28bea6a31c33e5ddc820d48fc438127e0b16f9.exe windows x86
d0d7bd66cf093e89326a7a68bcf883d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
SetEvent
VirtualProtect
VirtualAlloc
ExpandEnvironmentStringsW
GetFileAttributesA
GetFileSizeEx
GetModuleFileNameA
GlobalLock
ResetEvent
GetFileAttributesW
HeapReAlloc
GetLocalTime
GetSystemTimeAsFileTime
GetModuleHandleA
MultiByteToWideChar
GetLastError
CloseHandle
GetTimeZoneInformation
shlwapi
wnsprintfW
SHDeleteKeyA
PathMatchSpecW
PathCombineW
wnsprintfA
StrCmpNIA
StrStrW
wvnsprintfA
PathFindFileNameW
wvnsprintfW
PathFileExistsW
user32
LoadCursorA
FindWindowExA
SetProcessWindowStation
CloseWindowStation
GetWindowLongA
SendMessageA
EndDialog
ExitWindowsEx
SetThreadDesktop
GetMessageA
GetClipboardData
advapi32
CryptAcquireContextW
CryptDestroyHash
CryptCreateHash
RegEnumKeyExA
RegCreateKeyExA
RegCloseKey
CryptGetHashParam
CryptReleaseContext
CryptHashData
DuplicateTokenEx
RegQueryValueExA
RegDeleteValueA
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE