Static task
static1
Behavioral task
behavioral1
Sample
eb6a995ad8c80a6e91440c20616a9bed7f7c872e7f649d684e237e0ca3fc9a5a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb6a995ad8c80a6e91440c20616a9bed7f7c872e7f649d684e237e0ca3fc9a5a.exe
Resource
win10v2004-20220812-en
General
-
Target
eb6a995ad8c80a6e91440c20616a9bed7f7c872e7f649d684e237e0ca3fc9a5a
-
Size
385KB
-
MD5
58df9c23453595b7cd229d2d43c9acc5
-
SHA1
249db514551696d01cc184c4309cf860129234e8
-
SHA256
eb6a995ad8c80a6e91440c20616a9bed7f7c872e7f649d684e237e0ca3fc9a5a
-
SHA512
13c5e2de6acf8b085ae0ba2971094a295bfc777781b797117221ed1361756543f6ecfbfd3bce457ebcdd83ac324348f28dcad813a4e9170071eae3109679df09
-
SSDEEP
6144:brcnr3mGwSNzT2/CATZKP3e0BTMFNZyOG87s1IKcbKMevBg98MWBlo4YKY1:bonrzLELTX04PRs1IWMi4+loN1
Malware Config
Signatures
Files
-
eb6a995ad8c80a6e91440c20616a9bed7f7c872e7f649d684e237e0ca3fc9a5a.exe windows x86
1e6246d3c5fd6047a5589264bdf004d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
CreateEventA
VirtualQuery
GetModuleFileNameA
VirtualAlloc
lstrcpyA
lstrlenA
SetEvent
VirtualFree
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
GetLastError
VirtualProtect
GetModuleHandleA
DeleteFileA
GetCurrentThreadId
ResumeThread
ReadFile
SuspendThread
CreateFileA
LocalAlloc
GlobalFree
WriteFile
GlobalAlloc
SystemTimeToFileTime
GetSystemTime
Sleep
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RaiseException
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
LCMapStringW
GetVersion
GetCommandLineA
GetStartupInfoA
CloseHandle
FreeLibrary
GetCurrentThread
LoadLibraryA
GetProcAddress
SetThreadPriority
ExitProcess
user32
UpdateWindow
LoadIconA
LoadCursorA
ShowWindow
EndPaint
DrawTextA
GetClientRect
CreateWindowExA
PostQuitMessage
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
LoadStringA
EndDialog
AttachThreadInput
BringWindowToTop
RegisterClassA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
GetDesktopWindow
IsWindow
IsWindowVisible
IsRectEmpty
SetRect
UnregisterClassA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
GetDC
FillRect
ReleaseDC
TranslateAcceleratorA
gdi32
GetDIBits
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
Rectangle
SetROP2
GetObjectA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantInit
VariantClear
pdh
PdhGetCounterInfoA
PdhConnectMachineA
PdhCollectQueryData
PdhGetLogFileSize
PdhGetDataSourceTimeRangeW
wininet
InternetOpenW
InternetCloseHandle
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 335KB - Virtual size: 715KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE