Static task
static1
Behavioral task
behavioral1
Sample
ead58fbdab5d7de2d939e918edcad1da29ca797cb8eaca9622cc83b1664f1c73.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ead58fbdab5d7de2d939e918edcad1da29ca797cb8eaca9622cc83b1664f1c73.exe
Resource
win10v2004-20220812-en
General
-
Target
ead58fbdab5d7de2d939e918edcad1da29ca797cb8eaca9622cc83b1664f1c73
-
Size
305KB
-
MD5
51e825c82bf39aaf6663d045c77a772d
-
SHA1
6ce9925db777c82a3a4cb62498b1654aa76c53af
-
SHA256
ead58fbdab5d7de2d939e918edcad1da29ca797cb8eaca9622cc83b1664f1c73
-
SHA512
57511384afeec4c2dfa75adc8a3e7ef7c219fd55dc07cadb50b154da67a4f58a9fb5e75803d49849e87423dd701016b70573ae7a99eceb12104f24749cfc66c2
-
SSDEEP
6144:g6sxCezexYy/3BFSWjo5HH/BgVdWVEb5S/SFmKCXLqJ:F/ezgBFS5fBgVkGMHKC7
Malware Config
Signatures
Files
-
ead58fbdab5d7de2d939e918edcad1da29ca797cb8eaca9622cc83b1664f1c73.exe windows x86
09e30d7a50e73a7de719f02c3d532698
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetConsoleTitleA
SetEnvironmentVariableA
LoadLibraryA
DeleteFileA
GetModuleHandleW
HeapFree
CreateFileMappingW
WriteConsoleW
SetFilePointer
HeapCreate
GetACP
GetVersion
Heap32Next
GetShortPathNameW
DeleteFileA
CreateMailslotW
DeleteFileA
GetProcessHeap
GetStringTypeW
GetStringTypeW
GetExitCodeProcess
GetConsoleAliasW
mstscax
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetTscCtlVer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ