Static task
static1
Behavioral task
behavioral1
Sample
5565773acadd15c072dccb7f6a1e23686b2303658f500cef4fe6b0531f98964c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5565773acadd15c072dccb7f6a1e23686b2303658f500cef4fe6b0531f98964c.exe
Resource
win10v2004-20220901-en
General
-
Target
5565773acadd15c072dccb7f6a1e23686b2303658f500cef4fe6b0531f98964c
-
Size
769KB
-
MD5
0b51489271463ba1d7a4c372b5fbe74e
-
SHA1
8fda11ff9c3d873de389c70a8ed3de78d9230518
-
SHA256
5565773acadd15c072dccb7f6a1e23686b2303658f500cef4fe6b0531f98964c
-
SHA512
6439bae7a61c92dc144285c95f34156ebffd935e5c920e8f64579b6962805f0b9c061a635ba3cd2e46b24a0488ef31f504bdc60215aac6104a90dbc2328aa902
-
SSDEEP
12288:ORNtIIt/eKrKdPH2IpicI1CthDb1Lp2xlp4WKviIM+OlMbzhU63058v6e:iNt3/gdi5CthHn2xlpRYjMnlW2bmie
Malware Config
Signatures
Files
-
5565773acadd15c072dccb7f6a1e23686b2303658f500cef4fe6b0531f98964c.exe windows x86
6b04e3f70e0d6f3edbf920c7c2e7dbb5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetTickCount
CreateDirectoryW
ResetEvent
ReleaseMutex
HeapFree
FindClose
CreateFileMappingW
WriteConsoleW
GetCommandLineA
OpenEventW
SetStdHandle
ReleaseSemaphore
DeleteFileA
WriteFile
GetModuleHandleA
CreateMutexA
CreateFileA
GetFileType
RemoveDirectoryA
RemoveDirectoryA
VirtualProtectEx
GetDriveTypeA
Sleep
FindClose
user32
DrawTextW
MessageBoxA
FindWindowA
GetSysColor
GetClassInfoA
PeekMessageA
DispatchMessageA
IsWindow
DestroyMenu
IsZoomed
CreateIcon
DestroyMenu
GetWindowLongA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ