Static task
static1
Behavioral task
behavioral1
Sample
eaaf835cc88a2c56b08c6c42d9f3ecc8d2d18790485d902b2f8372de45190bb2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eaaf835cc88a2c56b08c6c42d9f3ecc8d2d18790485d902b2f8372de45190bb2.exe
Resource
win10v2004-20221111-en
General
-
Target
eaaf835cc88a2c56b08c6c42d9f3ecc8d2d18790485d902b2f8372de45190bb2
-
Size
76KB
-
MD5
ecf815aee980b53e6d8a1b0dd018535a
-
SHA1
e9e88ddbe23508783c4a10c46a1ec9b68f3ee5c3
-
SHA256
eaaf835cc88a2c56b08c6c42d9f3ecc8d2d18790485d902b2f8372de45190bb2
-
SHA512
b1aeb43c15e0ba017726609816212b18a4a9503b94bffb8470a89b9e03ce1e05ae06e4783a236be858e374a141da95a8ca408f1da8ba654ce11589e67aad58cb
-
SSDEEP
1536:8Nvfa2/3dXhxk7xF1pGfXsAs3TnrupjVrs2ryrd1vUQuq6:SvC2/3F21AXsRzruHs2qo
Malware Config
Signatures
Files
-
eaaf835cc88a2c56b08c6c42d9f3ecc8d2d18790485d902b2f8372de45190bb2.exe windows x86
5c9c2636f0f47467ad8587697b624069
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ZombifyActCtx
FatalAppExitW
GetDefaultCommConfigW
SetConsoleIcon
WriteProcessMemory
lstrcatA
GetProfileStringA
SetConsoleCursorMode
RestoreLastError
GetProcessWorkingSetSize
SetFileApisToOEM
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE