Static task
static1
Behavioral task
behavioral1
Sample
EBFA2BC9C35A6AC45633534EE0E7A6728921CA496A09C23FD4741D16AA0A6C62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
EBFA2BC9C35A6AC45633534EE0E7A6728921CA496A09C23FD4741D16AA0A6C62.exe
Resource
win10v2004-20220812-en
General
-
Target
EBFA2BC9C35A6AC45633534EE0E7A6728921CA496A09C23FD4741D16AA0A6C62
-
Size
278KB
-
MD5
5398a9499bfee6ef7a0dd1c2707fe3d6
-
SHA1
f89e4c24388bcab85ea5d851221d34511c839742
-
SHA256
ebfa2bc9c35a6ac45633534ee0e7a6728921ca496a09c23fd4741d16aa0a6c62
-
SHA512
2bd89db88fc683c36d88c63ab7a2df9aff9abbc2cbc78e01205ef46b75edde784f3f71cdb6e212f9064e31ab820ae76601dc42819e681a68f89551ccab480d49
-
SSDEEP
6144:3u/QZWeV4gfBz3hOfkjt/f0FvTMgZMW5+p6qM0EwZfG:3u1i4gfl3hOfUf0JM1/6q5EK
Malware Config
Signatures
Files
-
EBFA2BC9C35A6AC45633534EE0E7A6728921CA496A09C23FD4741D16AA0A6C62.exe windows x86
7245bc3ff6505fdff614ea46ac69d598
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionNamesW
GetFileSize
SearchPathW
SetPriorityClass
OpenFile
WriteConsoleInputW
SetFilePointer
GetConsoleAliasesLengthW
TlsGetValue
GetDriveTypeW
FindResourceExW
LoadResource
HeapAlloc
SystemTimeToFileTime
GetCommState
ZombifyActCtx
WritePrivateProfileSectionA
GetProfileStringW
SignalObjectAndWait
SetComputerNameW
OpenSemaphoreA
GetProcessPriorityBoost
GetWindowsDirectoryA
EnumTimeFormatsA
GetCommandLineA
GetSystemWow64DirectoryA
SetProcessPriorityBoost
GlobalAlloc
LoadLibraryW
GetConsoleMode
TerminateThread
GetPrivateProfileStructW
SetVolumeMountPointA
GlobalFlags
WritePrivateProfileStructW
SetConsoleMode
GetFileAttributesW
SetTimeZoneInformation
HeapQueryInformation
SetSystemPowerState
TerminateProcess
GetBinaryTypeW
GetACP
lstrlenW
SetThreadPriority
RaiseException
CreateJobObjectA
GetPrivateProfileIntW
FindFirstFileExA
GetLastError
IsDBCSLeadByteEx
GetCurrentDirectoryW
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
MoveFileW
OpenWaitableTimerA
GetLocalTime
LoadLibraryA
OpenMutexA
WriteConsoleA
ProcessIdToSessionId
BuildCommDCBAndTimeoutsW
IsSystemResumeAutomatic
SetConsoleOutputCP
AddAtomW
WriteProfileSectionW
GetCommMask
GetCurrentConsoleFont
FindAtomA
WaitForMultipleObjects
SetConsoleCursorInfo
DebugSetProcessKillOnExit
GetProcessShutdownParameters
ContinueDebugEvent
CancelTimerQueueTimer
EnumResourceNamesA
RequestWakeupLatency
ScrollConsoleScreenBufferA
ReleaseMutex
AddConsoleAliasA
DebugBreak
GetSystemTime
GetProfileSectionW
CopyFileExA
GetVolumeInformationW
lstrcpyA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
HeapValidate
IsBadReadPtr
GetModuleHandleW
ExitProcess
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
RtlUnwind
HeapReAlloc
HeapSize
HeapFree
GetOEMCP
GetCPInfo
IsValidCodePage
CreateFileW
CloseHandle
GetStringTypeW
LCMapStringW
FlushFileBuffers
user32
GetCursorInfo
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fopu Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ