Static task
static1
Behavioral task
behavioral1
Sample
eda2215c99d302b433448c1a34614a08936cbde14e6e9a16cee5e3ddf1bd3389.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eda2215c99d302b433448c1a34614a08936cbde14e6e9a16cee5e3ddf1bd3389.exe
Resource
win10v2004-20220812-en
General
-
Target
eda2215c99d302b433448c1a34614a08936cbde14e6e9a16cee5e3ddf1bd3389
-
Size
119KB
-
MD5
09ada54046a0d6460cf8dc0850796883
-
SHA1
53bac57ceb8918c93884eb1a1c02f216a0b49801
-
SHA256
eda2215c99d302b433448c1a34614a08936cbde14e6e9a16cee5e3ddf1bd3389
-
SHA512
e2dbd91539ec5ae34d7985e71828aa9a48b7b335994df85b79d9131d27ba4ce9738bf791cfcd8adc4d1175b938026940d141521a765532ace121f86d44bf9bf8
-
SSDEEP
3072:3ggzrKSQADE7JSfrmO0XcNGHAaFT8OHwvz:3prYAgANf8HA6o
Malware Config
Signatures
Files
-
eda2215c99d302b433448c1a34614a08936cbde14e6e9a16cee5e3ddf1bd3389.exe windows x86
8685a2d5149490d34e4ff67e45ccabaf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadTimes
GetComputerNameExA
GetFileSizeEx
FlushViewOfFile
CancelDeviceWakeupRequest
GetThreadTimes
CloseHandle
MapViewOfFile
GetThreadTimes
CreateMailslotA
GetTickCount
WriteFileEx
OpenFileMappingA
GetLogicalDriveStringsA
MulDiv
GlobalDeleteAtom
SetEndOfFile
SetSystemTimeAdjustment
TlsAlloc
GetThreadTimes
LCMapStringW
GetVolumePathNameA
GetDefaultCommConfigA
DebugBreak
FileTimeToLocalFileTime
CompareStringW
SetProcessShutdownParameters
GlobalSize
RtlFillMemory
CompareFileTime
user32
DdeFreeDataHandle
GetFocus
PostThreadMessageA
GetLastInputInfo
CreateAcceleratorTableW
AnimateWindow
LoadStringW
DdeReconnect
LoadAcceleratorsW
ArrangeIconicWindows
CreateIconIndirect
ReleaseCapture
LoadIconA
SetDlgItemTextA
MessageBoxIndirectW
EnumDisplayMonitors
OpenWindowStationA
TranslateAcceleratorW
SendDlgItemMessageW
DdeInitializeA
GetMessagePos
EnumClipboardFormats
IMPGetIMEW
GetCaretBlinkTime
RegisterWindowMessageA
GetWindowLongA
CreateIcon
TileChildWindows
ValidateRgn
CreateDesktopA
DestroyAcceleratorTable
GetMonitorInfoW
SetForegroundWindow
ChildWindowFromPointEx
BroadcastSystemMessageA
GetDoubleClickTime
GetWindowPlacement
DdeAbandonTransaction
DrawFocusRect
EnumThreadWindows
PtInRect
SetMenuDefaultItem
GetKeyState
DrawEdge
SetCursor
GetKeyboardLayoutNameW
PostQuitMessage
ImpersonateDdeClientWindow
GetProcessDefaultLayout
WinHelpA
LoadCursorA
UnpackDDElParam
OemKeyScan
CharPrevA
DrawIconEx
DlgDirListComboBoxW
GetClassInfoExW
DdeUnaccessData
GetSysColor
SetWindowsHookW
GetClassInfoW
IsWindowUnicode
GetClipCursor
GetPropW
SetDlgItemInt
GetTopWindow
CharLowerW
SendMessageTimeoutA
UnregisterHotKey
SendDlgItemMessageA
DefWindowProcA
GetListBoxInfo
ExcludeUpdateRgn
LoadIconW
MsgWaitForMultipleObjectsEx
DrawTextA
SetClassLongW
CharUpperBuffW
BeginPaint
IsHungAppWindow
GetInputState
GetShellWindow
RedrawWindow
SystemParametersInfoA
GetDlgCtrlID
WinHelpW
MonitorFromRect
SetWinEventHook
SetThreadDesktop
SendMessageCallbackA
SetScrollPos
LookupIconIdFromDirectoryEx
LockSetForegroundWindow
GetMenuItemRect
MonitorFromWindow
psapi
GetMappedFileNameA
GetDeviceDriverBaseNameA
GetDeviceDriverFileNameA
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 317B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE