Static task
static1
Behavioral task
behavioral1
Sample
eb159346814220dd5096bff9bc09386b657c8e2878bb6b54a768f0ff294e4971.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb159346814220dd5096bff9bc09386b657c8e2878bb6b54a768f0ff294e4971.exe
Resource
win10v2004-20221111-en
General
-
Target
eb159346814220dd5096bff9bc09386b657c8e2878bb6b54a768f0ff294e4971
-
Size
822KB
-
MD5
da94ffc5c60c9743620a6af169cb98b4
-
SHA1
bd19c740362b7da299477892eb6175f66e542f18
-
SHA256
eb159346814220dd5096bff9bc09386b657c8e2878bb6b54a768f0ff294e4971
-
SHA512
e46b796795e37429ec7b958bb7c2120392c5fc4639d7ce0b16d5d5f4915db7bfa3bc5a57e13b28df73fa51906ffd2c4bfe3a7468b4e0a444534255bdc2e3242e
-
SSDEEP
12288:ZxPnnmK8JyxCs1f0EG52rQ1Sz81DxO3jTYPvh/x68Koxi24OP7SV:Tnm6NzrnkDxOfY3K80
Malware Config
Signatures
Files
-
eb159346814220dd5096bff9bc09386b657c8e2878bb6b54a768f0ff294e4971.exe windows x86
86ba60f39a70a00b40872fafa543ab08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
ReadConsoleW
GetCurrentProcessId
IsBadStringPtrA
ReplaceFileW
GetStartupInfoA
CopyFileExW
SetCurrentDirectoryW
CreateSemaphoreA
WriteFile
GetStringTypeW
GetBinaryTypeW
SetEndOfFile
LoadLibraryA
HeapCreate
GetVersion
OpenMutexW
WriteConsoleW
d3dim
D3DFree
D3DRealloc
Direct3DGetSWRastZPixFmts
D3DMalloc
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.edata Size: 805KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ