Static task
static1
Behavioral task
behavioral1
Sample
eb64d44d378671bc24d3d69b1cdf02be39ab15588a7859f83ebeef958c6dc0ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb64d44d378671bc24d3d69b1cdf02be39ab15588a7859f83ebeef958c6dc0ff.exe
Resource
win10v2004-20220812-en
General
-
Target
eb64d44d378671bc24d3d69b1cdf02be39ab15588a7859f83ebeef958c6dc0ff
-
Size
809KB
-
MD5
09f898ed7998e036916ba4705f6c59f0
-
SHA1
14367cdf0a5f8e970079e5f0004ed36709089554
-
SHA256
eb64d44d378671bc24d3d69b1cdf02be39ab15588a7859f83ebeef958c6dc0ff
-
SHA512
c24eedce8997a8da341be617ec80561c7e134a728841212ffb3ac672fd04bf3d51d5ce8ec98822f960f771abd6b60aec17a6cb384e46e7fe1ce6c830333d5aa5
-
SSDEEP
12288:5xFmBtoRUyIBAXB8ZmUitiQZ1woFXtKjQMYxvBdjCqQAHmtNgrjD0bNt3eAfLda:NmBtkgB3XQZ1tX5MIhCqQ3t80bNtuaQ
Malware Config
Signatures
Files
-
eb64d44d378671bc24d3d69b1cdf02be39ab15588a7859f83ebeef958c6dc0ff.exe windows x86
fa09dadbb439cb4352e516b43cd8d465
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
lstrlenW
ReadFile
EnterCriticalSection
GetModuleFileNameA
CancelIo
GetConsoleTitleA
GetModuleHandleA
Sleep
VirtualProtect
CancelIo
GetTickCount
GetCommandLineA
TlsGetValue
GetFileSize
GetConsoleTitleA
GetEnvironmentStringsW
CreateDirectoryA
CreateDirectoryA
CloseHandle
WriteConsoleW
GetStartupInfoA
DeleteFileA
CreateFileA
RemoveDirectoryA
user32
DestroyMenu
GetWindowLongA
MessageBoxA
DispatchMessageA
IsWindowVisible
GetWindowLongA
IsWindow
GetSysColor
GetClassInfoA
wsprintfA
CreateIcon
PeekMessageA
IsWindowEnabled
console
CPlApplet
CPlApplet
CPlApplet
CPlApplet
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE