Static task
static1
Behavioral task
behavioral1
Sample
ea3bb3fedb15afb0ef719e06055f688ef482efb019645ccd4cb3ec874ea1f134.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea3bb3fedb15afb0ef719e06055f688ef482efb019645ccd4cb3ec874ea1f134.exe
Resource
win10v2004-20220901-en
General
-
Target
ea3bb3fedb15afb0ef719e06055f688ef482efb019645ccd4cb3ec874ea1f134
-
Size
499KB
-
MD5
305e61d7bbc5eeb298e919bbe092a4f6
-
SHA1
9ed73e5c6e593400c3686b7ddd1b5376c579ce08
-
SHA256
ea3bb3fedb15afb0ef719e06055f688ef482efb019645ccd4cb3ec874ea1f134
-
SHA512
efea91ba4473b0b589c968ce6277b51bd066d4f84262b48cf12f2b6eed49bd7947448292bd811a7bc231598dc8661654958e28405ebe3fb997ef2e25f53e6d20
-
SSDEEP
6144:5r/+A65HJx5s9XJI/5FA0OZUFgkcjNE/sLZ4P+gufZd5Yw7rc9:5rx66XJIRFA7UfcjNUYZk+Tv7
Malware Config
Signatures
Files
-
ea3bb3fedb15afb0ef719e06055f688ef482efb019645ccd4cb3ec874ea1f134.exe windows x86
90108e7cbd225f84a7283f7c8ebceb4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
ResumeThread
GetModuleFileNameA
TlsGetValue
IsBadStringPtrA
GetCommandLineW
GetModuleHandleA
HeapCreate
SetEvent
lstrlenA
ResetEvent
CreateFileA
GetStartupInfoA
GetACP
CancelIo
HeapDestroy
GetStdHandle
TlsAlloc
CreateFileMappingA
ReleaseMutex
advapi32
IsValidSecurityDescriptor
ControlService
IsValidSid
IsTextUnicode
InitializeSid
RegQueryValueW
RegEnumKeyA
RegCreateKeyExW
CreateProcessAsUserA
ClearEventLogW
IsValidAcl
RegDeleteValueA
CreateServiceW
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ