Static task
static1
Behavioral task
behavioral1
Sample
ea6b3e49fb96143908b2d873fe34fa24957e7e815b06c15c2a5370c584b8cb5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea6b3e49fb96143908b2d873fe34fa24957e7e815b06c15c2a5370c584b8cb5f.exe
Resource
win10v2004-20220812-en
General
-
Target
ea6b3e49fb96143908b2d873fe34fa24957e7e815b06c15c2a5370c584b8cb5f
-
Size
752KB
-
MD5
e4d82746f0435514c695c8be433cb0df
-
SHA1
f572dc9f181de961a15ba25b62b4b888c8a34a7a
-
SHA256
ea6b3e49fb96143908b2d873fe34fa24957e7e815b06c15c2a5370c584b8cb5f
-
SHA512
a7e1d75ee1a8da650437b81b792a06709a9422a9d5dcd625c63fda006a6489a3f072765e7dabc40e2fdfed539ff61f195144bd71a58568e317bc73021016b4f5
-
SSDEEP
12288:aYyYZZVn5BV8rILT/k9Wo0iE7uKzOCcpPGj65oEcE2XOE5sSy+M:aYyYT72c/k9qiE56CsGGpcj1y+
Malware Config
Signatures
Files
-
ea6b3e49fb96143908b2d873fe34fa24957e7e815b06c15c2a5370c584b8cb5f.exe windows x86
62cd958b5ed7470cb062fbfd048ed701
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CreateFileA
GetModuleHandleA
CreateMutexW
GetCurrentDirectoryA
GetFileSize
SuspendThread
HeapDestroy
GetStartupInfoW
AddAtomA
ReleaseMutex
FindClose
CloseHandle
SetLastError
GetProfileIntW
HeapSize
ResetEvent
ExitProcess
GetTickCount
WaitForSingleObject
HeapCreate
GetEnvironmentVariableA
InitializeCriticalSection
SetEndOfFile
GetTickCount
shell32
DragQueryFileA
DuplicateIcon
SHGetMalloc
ShellAboutA
ShellMessageBoxA
SHGetSettings
DragFinish
SHFree
StrChrA
SHGetDiskFreeSpaceA
DragAcceptFiles
DllUnregisterServer
ExtractIconA
dpmodemx
SPInit
SPInit
SPInit
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 746KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ