Static task
static1
Behavioral task
behavioral1
Sample
ea2737c250c956e673e2200c7b2d2468644b534bb5b7612967d5e1936e864154.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea2737c250c956e673e2200c7b2d2468644b534bb5b7612967d5e1936e864154.exe
Resource
win10v2004-20220812-en
General
-
Target
ea2737c250c956e673e2200c7b2d2468644b534bb5b7612967d5e1936e864154
-
Size
825KB
-
MD5
0b1ccc93fd0d1f7ce23d2304acd6ab30
-
SHA1
267f7fcc002f99b61a996997ef1a6a0e132056ec
-
SHA256
ea2737c250c956e673e2200c7b2d2468644b534bb5b7612967d5e1936e864154
-
SHA512
7be7bf718cd91628d26de13ae7fec94def7c6e3e57fcb53f72dc47c05005d55411b168e5491fb69389d00b27bc33ff57b62b9693cdf92798abeabbd5e016665a
-
SSDEEP
12288:dXLtWx5tufJNgW87/LiXdX2QvQcD0Z43vgbRfFM8iJDTAsVG5n+4HkmpEp:Nhq5tuBV8ymhc4C34bli8iZAsYn+e
Malware Config
Signatures
Files
-
ea2737c250c956e673e2200c7b2d2468644b534bb5b7612967d5e1936e864154.exe windows x86
bf716d45ee7325cdb92ed3f4fee20265
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetDriveTypeA
GetDriveTypeA
GetCurrentDirectoryA
GetDriveTypeA
GetModuleFileNameA
LoadLibraryA
GetDriveTypeA
VirtualQueryEx
GetDriveTypeA
GetDriveTypeA
VirtualAllocEx
GetDriveTypeA
IsBadStringPtrA
GetFileAttributesA
GetDriveTypeA
GetDriveTypeA
msxml6
DllSetProperty
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
Sections
.play Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1024B - Virtual size: 642B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.wdata Size: 805KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ