Static task
static1
Behavioral task
behavioral1
Sample
ea5d8e3d92e5002b075f573e43fef7ff356ab1bfb7e6e638d0f39fa318a0dc2e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea5d8e3d92e5002b075f573e43fef7ff356ab1bfb7e6e638d0f39fa318a0dc2e.exe
Resource
win10v2004-20220812-en
General
-
Target
ea5d8e3d92e5002b075f573e43fef7ff356ab1bfb7e6e638d0f39fa318a0dc2e
-
Size
424KB
-
MD5
3c34bab015acf45fa967c6791c7d3008
-
SHA1
809cae36f97ec02da41be75e94d09ff109bd7702
-
SHA256
ea5d8e3d92e5002b075f573e43fef7ff356ab1bfb7e6e638d0f39fa318a0dc2e
-
SHA512
107ecba2cc00bac27b0be70433ce31e65f2be13a24f465ffcf697782e12108fc3797dd6bf15c474ebcf24ba3484da8f578080f8f26c196949ed44387c2a47a18
-
SSDEEP
6144:GVA8n+saFT1r1Xu0MUHbhgD1fbVaQaYBK58vgVz8G8xypctxTmroXbftChXW3Ax4:GXJa71e01hqf8y46GYicnblCJxfS6
Malware Config
Signatures
Files
-
ea5d8e3d92e5002b075f573e43fef7ff356ab1bfb7e6e638d0f39fa318a0dc2e.exe windows x86
aa9545d6156cb23927b71cbe470ff0a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
clusapi
ClusterNodeEnum
comdlg32
ChooseColorA
msvcrt
memset
memcpy
shell32
SHFileOperationA
kernel32
GlobalMemoryStatusEx
FindNextVolumeMountPointW
ntdsapi
DsFreeSpnArrayW
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ordo Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.t Size: 4KB - Virtual size: 46B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mrt1 Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ