Static task
static1
Behavioral task
behavioral1
Sample
ea2163d51111567edb291e1d163f95a9e5d064ba2b8b50f5730e4a671ac6c2be.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea2163d51111567edb291e1d163f95a9e5d064ba2b8b50f5730e4a671ac6c2be.exe
Resource
win10v2004-20220812-en
General
-
Target
ea2163d51111567edb291e1d163f95a9e5d064ba2b8b50f5730e4a671ac6c2be
-
Size
293KB
-
MD5
7b2bea6c26dace0401c2822b0e5886c6
-
SHA1
1e20ef2bc4a45a6303e7aa04a2e15b07937f1244
-
SHA256
ea2163d51111567edb291e1d163f95a9e5d064ba2b8b50f5730e4a671ac6c2be
-
SHA512
35b1df0811a974f40c758cfc4bea022ae39bc23a0f71173f9363cb11e5ac05a9a22ab2c1381eaf97925625455ccc4cae2d3a6427a75e9582176584c32d7d1b19
-
SSDEEP
6144:R4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/C:R4tRsnS4UZiMJZ4BYU2
Malware Config
Signatures
Files
-
ea2163d51111567edb291e1d163f95a9e5d064ba2b8b50f5730e4a671ac6c2be.exe windows x86
7abe037488db1f97c973fc2c1b766c0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
FlushFileBuffers
GlobalFree
GetCurrentProcess
InterlockedExchange
RaiseException
GetLocaleInfoA
GetACP
SetEvent
FreeEnvironmentStringsA
GetCommandLineA
VirtualProtect
OpenSemaphoreA
GetCurrentProcessId
GetCurrentThread
GetStdHandle
HeapCreate
GetModuleHandleA
WriteConsoleA
GetSystemDirectoryA
GetCompressedFileSizeA
user32
wsprintfA
GetClassNameA
GetParent
EndPaint
GetCursorPos
IsIconic
ReleaseDC
GetWindow
FillRect
SetActiveWindow
DrawTextA
GetWindowTextLengthA
FrameRect
GetDlgItem
BeginPaint
SetForegroundWindow
GetFocus
ValidateRgn
ShowWindow
linkinfo
ResolveLinkInfoA
DestroyLinkInfo
IsValidLinkInfo
GetLinkInfoData
GetCanonicalPathInfoA
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ