Static task
static1
Behavioral task
behavioral1
Sample
eb502793fd89be5a92aa55a843ab25a792cf5cd0badd1aa83351e8e3f9c39568.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb502793fd89be5a92aa55a843ab25a792cf5cd0badd1aa83351e8e3f9c39568.exe
Resource
win10v2004-20220812-en
General
-
Target
eb502793fd89be5a92aa55a843ab25a792cf5cd0badd1aa83351e8e3f9c39568
-
Size
881KB
-
MD5
a2f21f4590e3b0e9e5c5a3a93f9538c0
-
SHA1
412aa63722c31021727aa806c035688fe9db4529
-
SHA256
eb502793fd89be5a92aa55a843ab25a792cf5cd0badd1aa83351e8e3f9c39568
-
SHA512
140649cc46aace1aef70c5460456296b3f7c4b0fc81d9486179276e4b287c9e6ccb7a734695d79fd384493ed8976df33a149a3f0fcf3d87a428f7180558d8042
-
SSDEEP
12288:wM8Hw+xt00s67k1A2PMnmMxmoslrxTRcuPoryeqvxWwMdOwfMmUDgSJKLXzARoEk:wQuQ6kUmHoexTToryebdOw9iubzSW
Malware Config
Signatures
Files
-
eb502793fd89be5a92aa55a843ab25a792cf5cd0badd1aa83351e8e3f9c39568.exe windows x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
FengYun Size: 27KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FengYun Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FengYun Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE