Static task
static1
Behavioral task
behavioral1
Sample
ea67d3e64b2b29b9e83b2af78ef551ad2f0b4c15eff0740741109daba5f8d466.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ea67d3e64b2b29b9e83b2af78ef551ad2f0b4c15eff0740741109daba5f8d466.exe
Resource
win10v2004-20220812-en
General
-
Target
ea67d3e64b2b29b9e83b2af78ef551ad2f0b4c15eff0740741109daba5f8d466
-
Size
305KB
-
MD5
cafbe1859caa83efc27f2f64b82af6ce
-
SHA1
2d96fab0eaf7b49705623a95f3e7da871bea4b8c
-
SHA256
ea67d3e64b2b29b9e83b2af78ef551ad2f0b4c15eff0740741109daba5f8d466
-
SHA512
db1f5fcff77cd375aff8e6a9fec634458addf05061dcb185fa980687fd2d296af38945254e18382ea2df2488a174e3b8c64219b95ab0476508a959e731052a5e
-
SSDEEP
6144:NO71gi4TG15/eG4VkWwJWcjEpCiW3JBo3QGSc2TAj0Hmeg1:N4+52kG+k7JWEunmJOLITPHmt1
Malware Config
Signatures
Files
-
ea67d3e64b2b29b9e83b2af78ef551ad2f0b4c15eff0740741109daba5f8d466.exe windows x86
94b7035550db6ff32d014d34f0f818e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasW
GetStringTypeW
HeapCreate
LoadLibraryA
Heap32Next
DeleteFileA
GetVersion
GetExitCodeProcess
WriteConsoleW
GetModuleHandleW
DeleteFileA
HeapFree
CreateFileMappingW
GetShortPathNameW
DeleteFileA
GetACP
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateMailslotW
GetConsoleTitleA
SetFilePointer
GetProcessHeap
GetStringTypeW
mstscax
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetTscCtlVer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ