Static task
static1
Behavioral task
behavioral1
Sample
eb91bed46a297036dd3541623c86177dd4e081ba7a550fd8ac881f5350fbbe55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb91bed46a297036dd3541623c86177dd4e081ba7a550fd8ac881f5350fbbe55.exe
Resource
win10v2004-20220812-en
General
-
Target
eb91bed46a297036dd3541623c86177dd4e081ba7a550fd8ac881f5350fbbe55
-
Size
90KB
-
MD5
5716d14a98175837b7a3bcd877aa2c30
-
SHA1
8285771a734ea6c8dc78dea33d2740d647dbf919
-
SHA256
eb91bed46a297036dd3541623c86177dd4e081ba7a550fd8ac881f5350fbbe55
-
SHA512
e70c7c81a0075b424633f15007643c26c1b38b785bcba555af34b775c6eea80462da9ffbfdee159e0067823e113437b673dee1be704a3d17866746ba03536e81
-
SSDEEP
1536:Vu51fOpBndbiaIT2r3Edo5OphO10LGnLPY4nv1:VuXqFZlYdEO3O1D
Malware Config
Signatures
Files
-
eb91bed46a297036dd3541623c86177dd4e081ba7a550fd8ac881f5350fbbe55.exe windows x86
5be50d8e9b42d791e4c1d4fe31391a8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFileInfoA
SHGetDesktopFolder
kernel32
HeapDestroy
lstrcpyA
Sleep
GetCurrentThreadId
GetDateFormatA
GetACP
lstrlenA
LoadLibraryExA
GetStringTypeA
CreateFileA
GetCurrentProcess
GlobalDeleteAtom
GetLastError
GetProcessHeap
GetOEMCP
GlobalAlloc
GetVersionExA
ExitProcess
GetCurrentProcessId
GetCommandLineA
ResetEvent
WideCharToMultiByte
GetProcAddress
CloseHandle
SetFilePointer
GetFullPathNameA
FormatMessageA
lstrcmpA
LocalReAlloc
lstrcpynA
GetCurrentThread
VirtualAlloc
LocalAlloc
user32
GetLastActivePopup
ShowWindow
GetActiveWindow
SetTimer
GetClipboardData
GetKeyState
BeginPaint
IsWindowEnabled
BeginDeferWindowPos
GetCursor
GetDCEx
GetMenu
EnumWindows
EnableWindow
CreateMenu
GetForegroundWindow
CheckMenuItem
FillRect
DrawEdge
GetCursorPos
EndPaint
GetMenuState
IsChild
GetWindow
GetFocus
CharToOemA
GetSubMenu
GetClassLongA
EnumChildWindows
SystemParametersInfoA
IsWindowVisible
GetCapture
Sections
CODE Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 209B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ