Static task
static1
Behavioral task
behavioral1
Sample
7aa52499822148d8f70498392206e617ba9e0223d109babdfd4f49dd790e0fd1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7aa52499822148d8f70498392206e617ba9e0223d109babdfd4f49dd790e0fd1.exe
Resource
win10v2004-20221111-en
General
-
Target
7aa52499822148d8f70498392206e617ba9e0223d109babdfd4f49dd790e0fd1
-
Size
769KB
-
MD5
a01568e1a928dae3479e07eaa730b838
-
SHA1
16dedefa401872b4746571abf2f36898699f5ee8
-
SHA256
7aa52499822148d8f70498392206e617ba9e0223d109babdfd4f49dd790e0fd1
-
SHA512
3791b87e5750ac7fe059793f3944110c2d0b104ac907df302bea112ce1fb632c1c2d16c607e83e3333fffe6363c001b9d8faa4c42210ad14f99128aa8b50fa83
-
SSDEEP
24576:Ljlo80tinA6w0SsQnD4PXm/cgS4nLLPNIyOZsr3+E7n:L504I0I8PgcgPn97OZsqEj
Malware Config
Signatures
Files
-
7aa52499822148d8f70498392206e617ba9e0223d109babdfd4f49dd790e0fd1.exe windows x86
309a1e6a0f07f40a97417e34b06757c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
CreateMutexA
GetVersion
VirtualProtectEx
CreateFileA
HeapFree
WriteFile
ReleaseSemaphore
WriteConsoleW
DeleteFileA
lstrlenA
GetFileType
OpenEventW
GetDriveTypeA
FindClose
RemoveDirectoryA
ResetEvent
GetCommandLineA
RemoveDirectoryA
FindClose
ReleaseMutex
CreateFileMappingW
SetStdHandle
Sleep
GetModuleHandleA
user32
DestroyMenu
DestroyMenu
IsWindow
CreateIcon
FindWindowA
IsZoomed
GetClassInfoA
PeekMessageA
MessageBoxA
DispatchMessageA
GetWindowLongA
GetSysColor
DrawTextW
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ