Static task
static1
Behavioral task
behavioral1
Sample
04eebe769147b4e201250b505ea82df2b120178e2be5beb7463027312d686a6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04eebe769147b4e201250b505ea82df2b120178e2be5beb7463027312d686a6c.exe
Resource
win10v2004-20220812-en
General
-
Target
04eebe769147b4e201250b505ea82df2b120178e2be5beb7463027312d686a6c
-
Size
108KB
-
MD5
27db83754f20db9264e488e03f537ed0
-
SHA1
550952d7c8684bd773f79add1230a107d66b7d3e
-
SHA256
04eebe769147b4e201250b505ea82df2b120178e2be5beb7463027312d686a6c
-
SHA512
6c2d6af765595d00b5d2d5cb1cefb98999f2888ac35d554cbf0472305c650794f84a0e982d5c7a705ab672280c2a3f3893113b49cf7c439b66bf791fbb9dcc43
-
SSDEEP
384:M77pYjvY6XtJfFCF4liVuz6re62cLyUwrXLZjvY6XtJGziq7HDefCRdpSQXtP0P3:/hxPliEzGejcGUw31h6+JStPOhKby
Malware Config
Signatures
Files
-
04eebe769147b4e201250b505ea82df2b120178e2be5beb7463027312d686a6c.exe windows x86
c39b66e6fba1d4c0e922f13b81d96b90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
SetFileAttributesW
SetLastError
WriteFile
InterlockedExchange
GetCurrentProcess
HeapCreate
CopyFileA
CreateEventA
GetTimeFormatA
GetDiskFreeSpaceA
InterlockedDecrement
WriteProcessMemory
GetCurrentThreadId
GetComputerNameA
IsValidLocale
GetAtomNameA
FoldStringW
GetCurrentDirectoryA
SleepEx
LoadLibraryA
GetDateFormatW
CreateDirectoryA
upnphost
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
ServiceMain
ctl3d32
Ctl3dEnabled
Ctl3dRegister
Ctl3dUnregister
dbnmpntw
ConnectionRead
ConnectionVer
ConnectionClose
ConnectionError
ConnectionWrite
user32
DrawIcon
CreateWindowExW
SetCursorPos
GetWindowTextA
DialogBoxParamW
LoadImageW
wsprintfA
IsWindow
IsCharLowerA
DispatchMessageA
ShowWindow
PeekMessageA
CharToOemA
SetFocus
GetMessageA
GetCaretPos
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ