Static task
static1
Behavioral task
behavioral1
Sample
e1221fa7981cfd8578f4afe0b11b63513ed54f983cd54ab5d3bb97facc4bb73a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1221fa7981cfd8578f4afe0b11b63513ed54f983cd54ab5d3bb97facc4bb73a.exe
Resource
win10v2004-20220812-en
General
-
Target
e1221fa7981cfd8578f4afe0b11b63513ed54f983cd54ab5d3bb97facc4bb73a
-
Size
769KB
-
MD5
015d75f40662f07b20b8677de6cef81e
-
SHA1
c07878f740099ff9f0ec35c237ea7426711506b9
-
SHA256
e1221fa7981cfd8578f4afe0b11b63513ed54f983cd54ab5d3bb97facc4bb73a
-
SHA512
02dca9a2b71c1222aa117f09f50d2abedafbff9a02133598fa742604e90a54aa04b08c6b01b8e33f7244c910e8e2c8f6e3f55f6757bcde8c430f3f8fdd7b9f70
-
SSDEEP
12288:RAZvkgiTVgr1npudJN94ZtKHNgMa6KklnGhq/Eo0yOXAhWhb0EkfynPRaY:CZtiTVgryuqNLtjCqsXAhwYEiG
Malware Config
Signatures
Files
-
e1221fa7981cfd8578f4afe0b11b63513ed54f983cd54ab5d3bb97facc4bb73a.exe windows x86
81f0355b6a18f7428aafb7540745712e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateFileMappingW
OpenEventW
FindClose
CreateFileA
ResetEvent
ReleaseMutex
GetCommandLineA
GetTickCount
VirtualProtectEx
lstrlenA
HeapFree
DeleteFileA
RemoveDirectoryA
RemoveDirectoryA
SetStdHandle
WriteFile
CreateDirectoryW
FindClose
WriteConsoleW
GetFileType
ReleaseSemaphore
CreateMutexA
Beep
GetDriveTypeA
user32
IsZoomed
CreateIcon
GetWindowLongA
MessageBoxA
GetSysColor
DestroyMenu
DispatchMessageA
IsWindow
PeekMessageA
FindWindowA
DestroyMenu
DrawTextW
GetClassInfoA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ