Static task
static1
Behavioral task
behavioral1
Sample
eaad3aed0b5ce2abeb24cb8bc5f26830fb0fe9db5c14ff9e6398b98a7dbf3347.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eaad3aed0b5ce2abeb24cb8bc5f26830fb0fe9db5c14ff9e6398b98a7dbf3347.exe
Resource
win10v2004-20220812-en
General
-
Target
eaad3aed0b5ce2abeb24cb8bc5f26830fb0fe9db5c14ff9e6398b98a7dbf3347
-
Size
130KB
-
MD5
6485666f35abca29f05fdb8f56f2ce90
-
SHA1
e6e92b71ccaeba87f2c3275b31ede7ec4c51b8d8
-
SHA256
eaad3aed0b5ce2abeb24cb8bc5f26830fb0fe9db5c14ff9e6398b98a7dbf3347
-
SHA512
b45fe4f36296fbcdfb5a1a6922c540de7e230824db0adcd902eca37d299ee4846d82e3f7225f32d00d51d8d6c4dc0c5171436f6fd2cf4aa845563182605280ae
-
SSDEEP
3072:fnBcq7k1JQbW9Xa0jkQAxfC6UFZOZ8shqEWjd/V:JN7doX+vHUF+qV/
Malware Config
Signatures
Files
-
eaad3aed0b5ce2abeb24cb8bc5f26830fb0fe9db5c14ff9e6398b98a7dbf3347.exe windows x86
b0f8e77fdf37c87cb2897de73699ffed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventW
GetCurrentThread
GetPrivateProfileIntW
VirtualProtect
SuspendThread
TlsGetValue
FindAtomA
SetLastError
lstrlenA
GetStringTypeW
GetPrivateProfileSectionA
CreateEventW
GetDriveTypeA
LoadLibraryW
GetProcessVersion
DeleteFileA
CreateMailslotA
GetProcessHeap
ResumeThread
CreateEventW
HeapFree
clbcatq
SetupOpen
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
SetupOpen
CheckMemoryGates
SetupOpen
ComPlusMigrate
DllGetClassObject
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
d3dramp
RampOldTri
g_RampOld_BeadTbl
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE