Static task
static1
Behavioral task
behavioral1
Sample
eaf354080f9608c430af3bb18f7992dda58bfcc62e1d291b4dc500f6a4f084be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaf354080f9608c430af3bb18f7992dda58bfcc62e1d291b4dc500f6a4f084be.exe
Resource
win10v2004-20220812-en
General
-
Target
eaf354080f9608c430af3bb18f7992dda58bfcc62e1d291b4dc500f6a4f084be
-
Size
196KB
-
MD5
2707ac9007c591db8f467726ff32c4e5
-
SHA1
e83e0ddfbdb6f4150b7c79e0dd24b834b23e0e6f
-
SHA256
eaf354080f9608c430af3bb18f7992dda58bfcc62e1d291b4dc500f6a4f084be
-
SHA512
673d11261fd310f0a77b46bcb71e928b82c33dfeb44cf88a0cf63c345ac74408bca5d5e065858bf7b2ad953cfad05ab0ee6941f1ff113eca1ad14c51966a9ad3
-
SSDEEP
3072:nGPn67+G6B22l9/HMO1/2XEycrl0D00b0+AVi6VUR7q74z3ARY3fBOMs:Kn67+rU8HMO+XEyil0Yvi5OSLfBOt
Malware Config
Signatures
Files
-
eaf354080f9608c430af3bb18f7992dda58bfcc62e1d291b4dc500f6a4f084be.exe windows x86
1245a36f3fe89524cf4d49adcc60b313
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
user32
CharLowerBuffA
wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
advapi32
RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
Sections
.text Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ