Static task
static1
Behavioral task
behavioral1
Sample
eb5ca8635177471ef7db5b2c3d7285cb4382cadab74149fbcd436b6d76a3292e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb5ca8635177471ef7db5b2c3d7285cb4382cadab74149fbcd436b6d76a3292e.exe
Resource
win10v2004-20220812-en
General
-
Target
eb5ca8635177471ef7db5b2c3d7285cb4382cadab74149fbcd436b6d76a3292e
-
Size
219KB
-
MD5
6e52d2184630f2b5587bdd241042ae20
-
SHA1
02ef005cd55050842022f6844f3db310200fc8e0
-
SHA256
eb5ca8635177471ef7db5b2c3d7285cb4382cadab74149fbcd436b6d76a3292e
-
SHA512
3158885c9ca5f19b9ba36a2b3a2fcea7b8eec07aba760f965e2b65e220c12af25096de3aa81276300084a6b5b41e5e938ddd28926b7240ae678b0fd1f8c9cfa9
-
SSDEEP
6144:alVNKfe/bTdhWPdfsl9/n0fhF+zao9zONsFKhfnQJ:al48bXWc9Qa/mBni
Malware Config
Signatures
Files
-
eb5ca8635177471ef7db5b2c3d7285cb4382cadab74149fbcd436b6d76a3292e.exe windows x86
c20d6edb2e42811b92908ac2721ec8d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconA
kernel32
GetVersionExA
VirtualFree
VirtualQuery
VirtualAlloc
lstrlenW
GetCommandLineA
GetStartupInfoA
RtlUnwind
LCMapStringA
GetStringTypeA
ExitProcess
ExitThread
CreateThread
HeapCreate
GetStdHandle
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
SetEndOfFile
SetEnvironmentVariableA
LocalAlloc
GetCurrentProcess
GetCurrentThreadId
InterlockedExchange
SetLastError
ole32
CoCreateObjectInContext
CoRevokeClassObject
SetErrorInfo
CoRegisterClassObject
CoTaskMemAlloc
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 62B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ