Static task
static1
Behavioral task
behavioral1
Sample
eb12ac7acf6e93c5bcfff768c18ea41e9d81119be8ad61f7259bd43aa26d486d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb12ac7acf6e93c5bcfff768c18ea41e9d81119be8ad61f7259bd43aa26d486d.exe
Resource
win10v2004-20220901-en
General
-
Target
eb12ac7acf6e93c5bcfff768c18ea41e9d81119be8ad61f7259bd43aa26d486d
-
Size
728KB
-
MD5
639e8eef0da0402b50c0cbf26bd75350
-
SHA1
d14b2dec4cd4d805098a05f407437c8e461be243
-
SHA256
eb12ac7acf6e93c5bcfff768c18ea41e9d81119be8ad61f7259bd43aa26d486d
-
SHA512
bff97cd8135426b3aff50322a7d2ebbc5d53f2d9adaace5fe48d58cf256257d22f70b5fae7172a19d16971f7db8d3d91f3cfae5374d057c968058282a07aa622
-
SSDEEP
12288:QUIYMiQL0s0l8stsuPFMTQq7p5MvV7XqQGjCLSJStiVbdDpcru7kw:wL0sO8sqgsQ+pEqQaFJBVbdDpcru7
Malware Config
Signatures
Files
-
eb12ac7acf6e93c5bcfff768c18ea41e9d81119be8ad61f7259bd43aa26d486d.exe windows x86
4651b695bb61271b7a427383e0145d66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
CreateConsoleScreenBuffer
HeapQueryInformation
GetProfileIntA
GetModuleHandleA
Sleep
VirtualAlloc
GetProfileSectionW
GetPrivateProfileStringA
CompareStringW
tapi32
lineNegotiateExtVersion
phoneGetStatus
lineOpen
lineGetCallInfoA
gdi32
GetRgnBox
GetPath
FONTOBJ_pxoGetXform
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 109KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 138KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ