Static task
static1
Behavioral task
behavioral1
Sample
3fe5280ddb53d9731d6e11abcddc9836b0d27d3b5c186a4fab83415f93852297.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fe5280ddb53d9731d6e11abcddc9836b0d27d3b5c186a4fab83415f93852297.exe
Resource
win10v2004-20220812-en
General
-
Target
3fe5280ddb53d9731d6e11abcddc9836b0d27d3b5c186a4fab83415f93852297
-
Size
769KB
-
MD5
0b91711ddb08164dd420dec046f93851
-
SHA1
8c4edfcc9e027fd7bd89e731a7554e890e415bae
-
SHA256
3fe5280ddb53d9731d6e11abcddc9836b0d27d3b5c186a4fab83415f93852297
-
SHA512
ef13dfd6b64ca00fa41fd0a1012188c3c4e990f21637bd71b02d082974602226a047aad41305b786c92e52d69b1a018815af388a03e04ab51e417cc843548df4
-
SSDEEP
12288:HGJAv5RQzOHLJTI03fveFnaa7+s5rs0eLVQn4w2MXxCSxgS3LyXAxUTDhwr0p5ee:HT5/tTPqnaa7t5kLC2MnLPOc0H
Malware Config
Signatures
Files
-
3fe5280ddb53d9731d6e11abcddc9836b0d27d3b5c186a4fab83415f93852297.exe windows x86
bf0dc60ea0a9f17a302911e24421060c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
CreateDirectoryW
OpenEventW
DeleteFileA
FindClose
SetStdHandle
VirtualProtectEx
ReleaseSemaphore
lstrlenA
CreateFileA
HeapFree
GetModuleHandleA
RemoveDirectoryA
ResetEvent
ReleaseMutex
WriteConsoleW
CreateFileMappingW
WriteFile
FindClose
GetTickCount
GetCommandLineA
RemoveDirectoryA
Sleep
GetDriveTypeA
CreateMutexA
user32
PeekMessageA
GetClassInfoA
FindWindowA
GetSysColor
CreateIcon
DispatchMessageA
DestroyMenu
IsZoomed
DrawTextW
MessageBoxA
IsWindow
GetWindowLongA
DestroyMenu
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ