Static task
static1
Behavioral task
behavioral1
Sample
ea1ab647bc1fee1ea65e9de8a2c38e19f80e853de337d3a292825c4ec34cee36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea1ab647bc1fee1ea65e9de8a2c38e19f80e853de337d3a292825c4ec34cee36.exe
Resource
win10v2004-20220812-en
General
-
Target
ea1ab647bc1fee1ea65e9de8a2c38e19f80e853de337d3a292825c4ec34cee36
-
Size
281KB
-
MD5
04003da982adad6c257838e2c109d901
-
SHA1
7de35658f572d5d621ea488125d11f84411d2305
-
SHA256
ea1ab647bc1fee1ea65e9de8a2c38e19f80e853de337d3a292825c4ec34cee36
-
SHA512
8730b2681c0a29db863667baf473efbd95eaf217e6c16fb00e093944d08f063ef9023c5344884bc63288ce0ee796c1c33ada18f98a2f7498844567f3810dcd9d
-
SSDEEP
6144:HNTOxfyu3kEml88Up4A3om9N96vFgTbEdOs5mdvjE8LiSQ5v:HNTOxfyu3kE28rZoGN7TbEdOImdvjE8y
Malware Config
Signatures
Files
-
ea1ab647bc1fee1ea65e9de8a2c38e19f80e853de337d3a292825c4ec34cee36.exe windows x86
9ba9f9181a85c86e410d1bbe6cf4a254
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
lstrcpyW
lstrcpyA
SwitchToThread
GetProcAddress
GetLastError
GetProcessHeap
HeapAlloc
CreateProcessW
SetErrorMode
lstrlenA
ExitProcess
user32
RegisterClassExW
MessageBoxA
ShowWindow
CreateWindowExW
TranslateMessage
UpdateWindow
DefWindowProcW
DispatchMessageW
GetMessageW
MessageBoxW
comctl32
ord17
powrprof
IsPwrHibernateAllowed
IsPwrShutdownAllowed
GetPwrCapabilities
wintrust
WintrustGetRegPolicyFlags
Sections
CODE Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bhd Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE