Static task
static1
Behavioral task
behavioral1
Sample
ebacee2a8f75fdebff8f6367d568064bc2251144d8bd57456199c8cd941630ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebacee2a8f75fdebff8f6367d568064bc2251144d8bd57456199c8cd941630ba.exe
Resource
win10v2004-20220901-en
General
-
Target
ebacee2a8f75fdebff8f6367d568064bc2251144d8bd57456199c8cd941630ba
-
Size
61KB
-
MD5
0c3cb807513bb817f0049ddfc788a7e6
-
SHA1
0074a876670674ad37759463ef6ce8c9040ec052
-
SHA256
ebacee2a8f75fdebff8f6367d568064bc2251144d8bd57456199c8cd941630ba
-
SHA512
ec0cae2ad331276feaace17cc672e2c65f1e6d489e55350e986f91759a7ff8d5a64d63e6cf5d7cca81247eb5d97ad5bab3a0eafa7929cb3b3a6bba0f91d1335b
-
SSDEEP
1536:PgAoiwKMDFwHmWd/+4vW2/dCKCXc4bkI:oMEwHmqW4vW2/oJn
Malware Config
Signatures
Files
-
ebacee2a8f75fdebff8f6367d568064bc2251144d8bd57456199c8cd941630ba.exe windows x86
9016b86d924ebf0874ca8cf0eb516583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
HeapFree
CloseHandle
WaitForMultipleObjects
FindVolumeClose
lstrlenA
HeapCreate
SetFileAttributesW
ExitThread
GetFileAttributesA
FindVolumeClose
GetDriveTypeA
GetCommandLineA
ReadFile
FindClose
LocalSize
EnterCriticalSection
GetCommandLineW
GetFileTime
GetCurrentDirectoryW
GetFileType
MapViewOfFile
GlobalLock
GetEnvironmentVariableW
IsBadReadPtr
uxtheme
DrawThemeBackground
CloseThemeData
GetThemeColor
GetThemeEnumValue
GetThemeBool
SetWindowTheme
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
IsThemeActive
OpenThemeData
GetWindowTheme
GetThemeTextExtent
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xgihadx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE