Static task
static1
Behavioral task
behavioral1
Sample
ea6fd2089d12063735ad28f8dc42a307659ec63e433665b50af55f8eb41c3dc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea6fd2089d12063735ad28f8dc42a307659ec63e433665b50af55f8eb41c3dc3.exe
Resource
win10v2004-20220812-en
General
-
Target
ea6fd2089d12063735ad28f8dc42a307659ec63e433665b50af55f8eb41c3dc3
-
Size
491KB
-
MD5
685d1434113250fd3cfe77092628e460
-
SHA1
9d3e4aea92e80edb8fef02233f6484cd3d3806aa
-
SHA256
ea6fd2089d12063735ad28f8dc42a307659ec63e433665b50af55f8eb41c3dc3
-
SHA512
3cdfe35e9b621ebfb69e5e0d3f40fadc4fafae4ae83a3c2abd0256838a2abf48ed8869edbfa38d27b33e122b885c8d4aff95616dd61c5461fbc42a35146a6214
-
SSDEEP
12288:abu/XN47zeo19cme1z1Lcr7JDwbMcY/IqjZn:ab4N4zTcD27JD4M1/hn
Malware Config
Signatures
Files
-
ea6fd2089d12063735ad28f8dc42a307659ec63e433665b50af55f8eb41c3dc3.exe windows x86
63c11543c9392301491b7a5084f9e189
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlIpv6AddressToStringA
ZwAccessCheckByTypeAndAuditAlarm
kernel32
GetCommandLineW
user32
GetDesktopWindow
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE