Static task
static1
Behavioral task
behavioral1
Sample
eed6f762a4c7430f866deaafcd893e4bfc6b24685a553abcd4f8ca77cca45665.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eed6f762a4c7430f866deaafcd893e4bfc6b24685a553abcd4f8ca77cca45665.exe
Resource
win10v2004-20220812-en
General
-
Target
eed6f762a4c7430f866deaafcd893e4bfc6b24685a553abcd4f8ca77cca45665
-
Size
228KB
-
MD5
1a94748e88bb160a330741da436ef838
-
SHA1
b8c39e4dcb273a5b3eea8fda069aa6cef55c3514
-
SHA256
eed6f762a4c7430f866deaafcd893e4bfc6b24685a553abcd4f8ca77cca45665
-
SHA512
3ff21e80f389ed15c5a29562de936a0a84f232b7907ea30040f7aad2219a35a847da73f2180e01120e0586e40087096e4b512bc66e86a938a85952a10d09337f
-
SSDEEP
3072:gELCPWvsehw+IfW+tFMxTsqnl0nda1hcTnAP3ibMLJLAeBfQcjz9uQdUHoGfPlNX:gqCOlh/I++XLalsyibbMKwlZyUFXmIO
Malware Config
Signatures
Files
-
eed6f762a4c7430f866deaafcd893e4bfc6b24685a553abcd4f8ca77cca45665.exe windows x86
76030c57aba0d23036918fdfe6aef6d6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetACP
GetSystemDirectoryW
SetPriorityClass
GlobalDeleteAtom
GetFileType
GetProcAddress
WinExec
LoadLibraryA
FindClose
SetNamedPipeHandleState
HeapAlloc
GetEnvironmentStringsW
IsProcessorFeaturePresent
VirtualAlloc
SetFileAttributesW
SetEndOfFile
EnumResourceTypesW
InterlockedExchangeAdd
Sleep
lstrcmpW
GetTimeZoneInformation
WriteFile
GetVersionExA
GetSystemTime
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetCPInfo
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
HeapReAlloc
GetOEMCP
LCMapStringA
LCMapStringW
Sections
.text Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ