Static task
static1
Behavioral task
behavioral1
Sample
ebee31c19c8253dae131814c3362143f8a5eb2379ddc653a5f029a14f1daf9be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebee31c19c8253dae131814c3362143f8a5eb2379ddc653a5f029a14f1daf9be.exe
Resource
win10v2004-20220812-en
General
-
Target
ebee31c19c8253dae131814c3362143f8a5eb2379ddc653a5f029a14f1daf9be
-
Size
811KB
-
MD5
a06d82cf1f9217d39306d3af153eba30
-
SHA1
67c0583853b1d3ee18740cdd4b2ffa81c32d10f3
-
SHA256
ebee31c19c8253dae131814c3362143f8a5eb2379ddc653a5f029a14f1daf9be
-
SHA512
4d7a2da94233a63446e805a404e67035e0a81086c512ad618a92018ec10f488bb51016b314ddce9657f6f51480add06cecda6eca0ad6ae4008b8fb88a7ac8b10
-
SSDEEP
24576:WFBmWpvK4gI+9ilEzK7dsKMXOkpGBRlZaKpX:6BLCnjSEz2sPipZaG
Malware Config
Signatures
Files
-
ebee31c19c8253dae131814c3362143f8a5eb2379ddc653a5f029a14f1daf9be.exe windows x86
565d2b38dadca574c12545c2535df105
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
WriteConsoleW
GetModuleHandleA
GetDriveTypeA
Sleep
GetConsoleMode
FindClose
LeaveCriticalSection
GetStartupInfoA
CreateDirectoryW
GetCalendarInfoA
GetTickCount
EnterCriticalSection
GlobalFree
CreateFileA
RemoveDirectoryA
GetConsoleTitleW
GetModuleFileNameA
DeleteFileA
TlsGetValue
CloseHandle
GetCommandLineW
GetFileSize
InitializeCriticalSection
VirtualProtectEx
user32
GetWindowLongA
IsWindowVisible
IsWindowEnabled
DispatchMessageA
PeekMessageA
GetSysColor
IsWindow
GetWindowDC
GetWindowLongA
EqualRect
FillRect
wsprintfA
MessageBoxA
cryptdlg
CertTrustInit
CertConfigureTrustA
CertTrustCleanup
CertTrustCertPolicy
advapi32
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE