Static task
static1
Behavioral task
behavioral1
Sample
eb2d919a9eaef185a2ffa74c5d74688246c3798a9bf8b05f6f3ec4cddef002b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb2d919a9eaef185a2ffa74c5d74688246c3798a9bf8b05f6f3ec4cddef002b3.exe
Resource
win10v2004-20220812-en
General
-
Target
eb2d919a9eaef185a2ffa74c5d74688246c3798a9bf8b05f6f3ec4cddef002b3
-
Size
36KB
-
MD5
75d97bd596483f12737219b55aa30580
-
SHA1
b4ec600516ce12497bdcc85d51ce773301925ce8
-
SHA256
eb2d919a9eaef185a2ffa74c5d74688246c3798a9bf8b05f6f3ec4cddef002b3
-
SHA512
aa31d2fb772318a6a9706ae5deb900e03ad281c46f7c387d93097153cca46071f5f2c7c81dedba0d7b58ff0650425efb6ce4dc4774340f904ba7daba46ce2ab6
-
SSDEEP
384:q3DjxiGv4wIbI69TvOWMU+GYfdEz+n6iy1qHRKjTJ:WDjxi2iBvOWoViiy2RKp
Malware Config
Signatures
Files
-
eb2d919a9eaef185a2ffa74c5d74688246c3798a9bf8b05f6f3ec4cddef002b3.exe windows x86
0bc81d124dd0e855d4b9f61f1e261410
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
LoadLibraryA
GetCurrentProcess
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringA
HeapAlloc
LCMapStringW
WriteFile
RtlUnwind
HeapFree
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetACP
GetCPInfo
GetOEMCP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
lstrcpyA
TerminateProcess
MultiByteToWideChar
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
user32
CreateDialogParamA
SetActiveWindow
FindWindowA
RegisterClassA
SetForegroundWindow
BringWindowToTop
SetWindowPos
GetMessageA
SetFocus
CreateWindowExA
DispatchMessageA
IsDialogMessageA
TranslateMessage
PostQuitMessage
LoadStringA
SendMessageA
GetWindowLongA
DefWindowProcA
SetWindowLongA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE