Static task
static1
Behavioral task
behavioral1
Sample
ebaf2260a67553d59e4e2271c6c66ab5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ebaf2260a67553d59e4e2271c6c66ab5.exe
Resource
win10v2004-20220812-en
General
-
Target
ebaf2260a67553d59e4e2271c6c66ab5.bin
-
Size
331KB
-
MD5
ebaf2260a67553d59e4e2271c6c66ab5
-
SHA1
f7f55ae786ae40de1712dda2ddf7bb06eabc7994
-
SHA256
669eb5567863b8c7062615efe0eb5a77e4432bb383cb8d0e19997ecfdb243863
-
SHA512
5113aaa67d159c8970067462a65fee5cddf1a99abbeb58dca9efea2c146f43e339202724016d94b763b35aaf6623d2af33c1ecd4474096d92733788cfff41203
-
SSDEEP
6144:rWO+qoJBRYkT7T5Yx4exDdm3atrjeoA8Qtp3PgEA:L+qgRYy71E4exDdm3aADpfgE
Malware Config
Signatures
Files
-
ebaf2260a67553d59e4e2271c6c66ab5.bin.exe windows x86
dd691aa7a06ce54500e5f0ebbddf1c7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexW
GetCurrentProcess
GetNamedPipeHandleStateW
GetQueuedCompletionStatus
FillConsoleOutputCharacterW
EnumSystemCodePagesW
LocalUnlock
GetVolumeNameForVolumeMountPointA
GetVersionExA
VerifyVersionInfoA
WriteConsoleInputA
EnumDateFormatsW
FindNextFileA
CopyFileExW
BuildCommDCBAndTimeoutsW
VirtualLock
WriteProfileStringA
VerifyVersionInfoW
GetFileInformationByHandle
DeleteFileA
FindNextVolumeMountPointW
TlsSetValue
LoadResource
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExW
OpenEventA
GetModuleHandleA
GetSystemDirectoryW
GetDriveTypeW
BuildCommDCBAndTimeoutsA
LoadLibraryA
GetShortPathNameW
ReleaseActCtx
DeleteFileW
GetCommandLineA
InterlockedIncrement
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageW
GetModuleFileNameA
EnterCriticalSection
FindNextVolumeW
GetExitCodeThread
CreateNamedPipeW
GetUserDefaultLCID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomA
InterlockedDecrement
GetVersionExW
HeapSize
_hwrite
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotA
GetCPInfoExW
GetSystemWow64DirectoryW
SetLastError
GetPrivateProfileIntW
GetConsoleAliasExesA
DebugBreak
EndUpdateResourceW
GetTickCount
VirtualQuery
OpenFileMappingA
GetModuleHandleW
GetDefaultCommConfigA
VirtualAlloc
TerminateProcess
GetACP
CreateIoCompletionPort
GetDiskFreeSpaceExA
DefineDosDeviceA
GetExitCodeProcess
EnumResourceTypesA
SetConsoleTextAttribute
GlobalGetAtomNameA
IsProcessInJob
MoveFileA
lstrcpynW
WriteConsoleA
GetProcAddress
lstrcatA
LoadLibraryW
ReadConsoleOutputA
GetStartupInfoW
FoldStringW
WritePrivateProfileStringW
SetHandleInformation
WritePrivateProfileStructA
DeleteCriticalSection
GetFileAttributesA
GetCurrentActCtx
CopyFileA
CancelDeviceWakeupRequest
ResetEvent
LockFile
MoveFileW
DisableThreadLibraryCalls
GetOverlappedResult
GetCommTimeouts
FormatMessageA
InterlockedExchangeAdd
GlobalAlloc
SetThreadPriorityBoost
SetFileShortNameA
GetFileAttributesW
SetCalendarInfoW
ConvertFiberToThread
SetComputerNameA
GetConsoleAliasesW
EnumDateFormatsExW
SetTimeZoneInformation
SetConsoleOutputCP
MoveFileWithProgressW
GetStdHandle
GetLocalTime
FoldStringA
EnumSystemLocalesW
DeactivateActCtx
CopyFileExA
CreateMemoryResourceNotification
OpenSemaphoreA
GetModuleHandleExA
AddAtomW
_hread
GetFileType
UnhandledExceptionFilter
GetConsoleAliasesLengthA
GetProcessShutdownParameters
lstrcpynA
GlobalUnWire
GetCompressedFileSizeW
ReadConsoleA
MapUserPhysicalPages
WriteConsoleOutputCharacterW
OpenJobObjectW
CreateFileA
SetTimerQueueTimer
SetUnhandledExceptionFilter
RaiseException
HeapValidate
IsBadReadPtr
LeaveCriticalSection
GetModuleFileNameW
IsDebuggerPresent
GetLastError
SetFilePointer
SetStdHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
Sleep
ExitProcess
SetHandleCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
FlushFileBuffers
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
ReadFile
user32
CharUpperA
Sections
.text Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pupaduj Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.koxe Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hasuwub Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.soba Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ