Static task
static1
Behavioral task
behavioral1
Sample
eac4181e9077928994312b09172d47d54105e0046f78649d95505a910f1535e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eac4181e9077928994312b09172d47d54105e0046f78649d95505a910f1535e8.exe
Resource
win10v2004-20220812-en
General
-
Target
eac4181e9077928994312b09172d47d54105e0046f78649d95505a910f1535e8
-
Size
157KB
-
MD5
70c48760cf7f8196e3d9c540ed23e1e0
-
SHA1
8af271e40316be150d7d3a0de91af1fc47451590
-
SHA256
eac4181e9077928994312b09172d47d54105e0046f78649d95505a910f1535e8
-
SHA512
b9855b5eecfa2563ef9dfef0822cafd4d9c76f7476e466a848b857f01de9b50dba498251ee384cf7c3c4fc949cbb0924349a751a97a7736b109bc0d6ed6006fc
-
SSDEEP
3072:WlfNsw71c4tcM/Kd/dt43JLGa+Wu81K28UaW:W5771cBM/Kd/7aJiGuA0Ua
Malware Config
Signatures
Files
-
eac4181e9077928994312b09172d47d54105e0046f78649d95505a910f1535e8.exe windows x86
f5c57843b5886f39f52006f8031a9aa1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sleep
VirtualFree
EnterCriticalSection
InterlockedExchange
CancelIo
lstrcmpA
GetPrivateProfileStringA
GetVersionExA
lstrcatA
GetWindowsDirectoryA
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
LocalReAlloc
GetFileSize
ReadFile
SetFilePointer
MoveFileA
CreateProcessA
CreateThread
InitializeCriticalSection
lstrcmpiA
WriteFile
CreateFileA
GetSystemDirectoryA
GetLocalTime
HeapFree
HeapAlloc
LocalSize
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetTickCount
WaitForMultipleObjects
TerminateProcess
OpenProcess
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
GetCurrentThreadId
OutputDebugStringA
GetSystemInfo
GetComputerNameA
SetErrorMode
FreeLibrary
LocalAlloc
RtlUnwind
RaiseException
GetLastError
TlsSetValue
TlsGetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
SetLastError
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
LCMapStringA
LCMapStringW
shell32
SHGetSpecialFolderPathA
Sections
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 141KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ