Static task
static1
Behavioral task
behavioral1
Sample
ea22fcf52aecc827da44d607d634de03877aa4099fffed71cf43e52e19e9bf45.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea22fcf52aecc827da44d607d634de03877aa4099fffed71cf43e52e19e9bf45.exe
Resource
win10v2004-20220901-en
General
-
Target
ea22fcf52aecc827da44d607d634de03877aa4099fffed71cf43e52e19e9bf45
-
Size
64KB
-
MD5
757797eb22df90bb625776ba0e2aaac0
-
SHA1
5638a01e43771569808743be1edee6c00b9a047c
-
SHA256
ea22fcf52aecc827da44d607d634de03877aa4099fffed71cf43e52e19e9bf45
-
SHA512
f629eeb44cf51ced36d2624b82c750fa651aa7d9e00e01916b6680e89a5e0b90ec373eef051c3ad582c1f7a2ef5fdb1ab7b009dc70146b4bcdae88ed8b15fb6c
-
SSDEEP
1536:JcA8Ln/DoyFP/AMUefAT8TCbm94azZHmeqmdhGbk0t:JcA8L/8WP/AMLfS8eaZZomub
Malware Config
Signatures
Files
-
ea22fcf52aecc827da44d607d634de03877aa4099fffed71cf43e52e19e9bf45.exe windows x86
d552f913d43de94de56b2a051e1874bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileSize
GetFileTime
CloseHandle
GetModuleHandleA
lstrcpyA
HeapCreate
FindResourceA
GetCurrentDirectoryW
CreateMutexA
WriteConsoleW
WriteConsoleW
GetStartupInfoA
IsValidLocale
ReleaseMutex
SetFileAttributesA
IsBadStringPtrA
GetLastError
ReadFile
FormatMessageA
WriteConsoleW
lstrcpyW
msi
MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
MsiAdvertiseProductA
clbcatq
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
SetupOpen
SetupOpen
SetSetupSave
SetSetupSave
SetupOpen
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE