Static task
static1
Behavioral task
behavioral1
Sample
5a832e310da4bfde20022173a9ffa53c5a7485719437a1992dbb24ab5828693d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a832e310da4bfde20022173a9ffa53c5a7485719437a1992dbb24ab5828693d.exe
Resource
win10v2004-20220812-en
General
-
Target
5a832e310da4bfde20022173a9ffa53c5a7485719437a1992dbb24ab5828693d
-
Size
769KB
-
MD5
0ac7e22e39e7d4e21cb1971a55d4180c
-
SHA1
a0828bcc6c29905ed09c0a7db4b822a96d128c75
-
SHA256
5a832e310da4bfde20022173a9ffa53c5a7485719437a1992dbb24ab5828693d
-
SHA512
7dd795c6aab2bc0a18035e4d09269b22af1664f653d7b61d3f17e022d2addb7f27fcf92dfa145efb6f50b16b9356aa6e33f19ba7365ca7c0df78b9ef3814bc65
-
SSDEEP
12288:1StQUL3vreosk4PUglS69QRXsvjaD82sroM89djzLBMehOG/fobJjxtoj:1ipTXV4PJlEojCsroz7DOifo9/oj
Malware Config
Signatures
Files
-
5a832e310da4bfde20022173a9ffa53c5a7485719437a1992dbb24ab5828693d.exe windows x86
5b594e6a0663dcbcad81796c7f882071
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetDriveTypeA
ReleaseSemaphore
ReleaseMutex
OpenEventW
CreateDirectoryW
RemoveDirectoryA
CreateFileA
WriteFile
lstrlenA
GetModuleHandleA
WriteConsoleW
GetFileType
DeleteFileA
CreateFileMappingW
CreateMutexA
VirtualProtectEx
GetVersion
GetCommandLineA
FindClose
RemoveDirectoryA
Sleep
FindClose
HeapFree
ResetEvent
user32
IsZoomed
PeekMessageA
DestroyMenu
DestroyMenu
CreateIcon
DrawTextW
GetSysColor
DispatchMessageA
IsWindow
GetClassInfoA
GetWindowLongA
MessageBoxA
FindWindowA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ