Static task
static1
Behavioral task
behavioral1
Sample
eb638710584d09d7c6914f7715a272e8687a73e5a8a7259fef23b6c62dfc899b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb638710584d09d7c6914f7715a272e8687a73e5a8a7259fef23b6c62dfc899b.exe
Resource
win10v2004-20221111-en
General
-
Target
eb638710584d09d7c6914f7715a272e8687a73e5a8a7259fef23b6c62dfc899b
-
Size
51KB
-
MD5
25ad470edc75b87807d31d42890a7d2c
-
SHA1
2f5933cfe65919f54d7d9704b374e18577c95f19
-
SHA256
eb638710584d09d7c6914f7715a272e8687a73e5a8a7259fef23b6c62dfc899b
-
SHA512
165b288c933b41785d2d3d9b368c6fae9c8d4c2c0d91ee1cacf303e7f65c2ff824e406e9c6a396111b5eec818db90fee15d461099662cbb7a37957ab2c881598
-
SSDEEP
768:8zpYFSv9d8eteVbF/Bu3XaMflfODfuuEtjALMx+jdlqjnDo9+qxfmBLCxUgQMGLi:+z8x6Xa+l5pDDAx+qRYxv4wdA
Malware Config
Signatures
Files
-
eb638710584d09d7c6914f7715a272e8687a73e5a8a7259fef23b6c62dfc899b.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE