EeZEBf6T@12
Static task
static1
Behavioral task
behavioral1
Sample
f8cabc644e0bf54e36970e644d70eb1976beccf2653e2c1e13b3e95bd44ac5b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8cabc644e0bf54e36970e644d70eb1976beccf2653e2c1e13b3e95bd44ac5b8.exe
Resource
win10v2004-20220901-en
General
-
Target
f8cabc644e0bf54e36970e644d70eb1976beccf2653e2c1e13b3e95bd44ac5b8
-
Size
98KB
-
MD5
7ab0896de4d7a41fecb3e855afdcbc02
-
SHA1
ff895eed187e52f0c6e69769b5540521cfc071ba
-
SHA256
f8cabc644e0bf54e36970e644d70eb1976beccf2653e2c1e13b3e95bd44ac5b8
-
SHA512
2e141a98ef3293f2282785de658b312c3dbe1539bf9b897810e2d3948bd766ecdb7119f9dbb8450f21a7be0bd2d6f6212e7598b1ce6ad954983330ace3b76fc4
-
SSDEEP
1536:pdwL+rBVoqTLKRqHlMIlc+JSVbYuzkGffTwtG4ESoF5w9H4aQUGFNZAesNoiW4m3:3kH5qrOFQGsMbp7w9HbQuNoi3a
Malware Config
Signatures
Files
-
f8cabc644e0bf54e36970e644d70eb1976beccf2653e2c1e13b3e95bd44ac5b8.exe windows x86
d5f9d10594a27362b462ff005e74b817
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderLocation
DragQueryFileA
kernel32
GetModuleHandleA
ExitProcess
GetEnvironmentStrings
GlobalAlloc
CreateFileA
GetFileAttributesA
DeleteCriticalSection
GetDiskFreeSpaceA
CreateEventA
VirtualAlloc
ReadFile
GetFullPathNameA
MulDiv
RaiseException
LockResource
CreateThread
LoadLibraryExA
MoveFileA
WriteFile
GetVersionExA
lstrlenA
GetUserDefaultLCID
LoadLibraryA
user32
GetActiveWindow
IsRectEmpty
IsWindow
GetMenu
IsIconic
IsCharLowerA
LoadIconA
IsWindowEnabled
IsDialogMessageA
shlwapi
PathFileExistsA
SHStrDupA
SHDeleteValueA
SHGetValueA
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ