Static task
static1
Behavioral task
behavioral1
Sample
1127cd604486d00765b7b928e656087e2005721744f4428636a0477ea4142c72.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1127cd604486d00765b7b928e656087e2005721744f4428636a0477ea4142c72.exe
Resource
win10v2004-20220812-en
General
-
Target
1127cd604486d00765b7b928e656087e2005721744f4428636a0477ea4142c72
-
Size
769KB
-
MD5
012acb234db5ee8be5119aeb8bf83866
-
SHA1
e15c138d27a5061d28d75740c4431103f9205451
-
SHA256
1127cd604486d00765b7b928e656087e2005721744f4428636a0477ea4142c72
-
SHA512
6fcd017dd4f697a83e73cb151045939625b3d81ecc28a1cd1cecb63694fe6e29b235a17e551da9e92d4f8f7596a2611860ca15d9911bacda39abaafc8b4c7106
-
SSDEEP
12288:Wg23Mu/EUKicMDsrW4l6xF8u5fvBQN17wHKC1UBpaSptMaqQNbcjpNJ+a0Gie:Wgvu/UMI/68YfJQNhc+HcQN44
Malware Config
Signatures
Files
-
1127cd604486d00765b7b928e656087e2005721744f4428636a0477ea4142c72.exe windows x86
dd47df1ca275343cd3ea1c2a404815a4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
FindClose
VirtualProtectEx
CreateFileA
RemoveDirectoryA
lstrlenA
GetCommandLineA
DeleteFileA
CreateDirectoryW
GetFileType
FindClose
CreateFileMappingW
GetTickCount
WriteConsoleW
SetStdHandle
ReleaseSemaphore
Sleep
GetDriveTypeA
ResetEvent
ReleaseMutex
GetModuleHandleA
WriteFile
RemoveDirectoryA
CreateMutexA
HeapFree
user32
CreateIcon
DrawTextW
IsWindow
MessageBoxA
PeekMessageA
IsZoomed
DispatchMessageA
DestroyMenu
DestroyMenu
GetClassInfoA
GetSysColor
GetWindowLongA
FindWindowA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ