Static task
static1
Behavioral task
behavioral1
Sample
2eeb8edd0bd825410073e6846be941cc72c85f71a66a91cbb6d95e020647b8d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2eeb8edd0bd825410073e6846be941cc72c85f71a66a91cbb6d95e020647b8d6.exe
Resource
win10v2004-20220812-en
General
-
Target
2eeb8edd0bd825410073e6846be941cc72c85f71a66a91cbb6d95e020647b8d6
-
Size
63KB
-
MD5
0bdaeca6638358d30d20d4d78750967c
-
SHA1
215625ef971500f893aee79b04ad7a7970b14888
-
SHA256
2eeb8edd0bd825410073e6846be941cc72c85f71a66a91cbb6d95e020647b8d6
-
SHA512
544d7f624835d5f344a93560112bb77a96c4f38085599ff98c4d0c7a06aaef63c01a90a46fd34a2388963681d099f91fa48ec5ab94f50b20e586f3d4b70aa668
-
SSDEEP
768:LNfzZFoh5YwLsWFofIvmtte8oTk1eh5uQlp5KvzKX7wUDTbMlps2DUW4vQVPt86l:RnctJ8eRSZVPt8BYwNKQCogAoeakC
Malware Config
Signatures
Files
-
2eeb8edd0bd825410073e6846be941cc72c85f71a66a91cbb6d95e020647b8d6.exe windows x86
b086a3f6c1d1e87694814bb94b7c5453
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnlockFile
BaseDumpAppcompatCache
GetNlsSectionName
GetCommModemStatus
SetConsoleScreenBufferSize
WaitForMultipleObjectsEx
RtlCaptureStackBackTrace
AddLocalAlternateComputerNameW
DnsHostnameToComputerNameA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE