Static task
static1
Behavioral task
behavioral1
Sample
ead919a27338fd4ba333432ded6c5e9a809b5a30e84a51f367a3e4a181b89265.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ead919a27338fd4ba333432ded6c5e9a809b5a30e84a51f367a3e4a181b89265.exe
Resource
win10v2004-20221111-en
General
-
Target
ead919a27338fd4ba333432ded6c5e9a809b5a30e84a51f367a3e4a181b89265
-
Size
87KB
-
MD5
b903eccccc4ca71152a35aa554bdaecc
-
SHA1
9a23aad295a80c4783212fc89f52f9d883d53695
-
SHA256
ead919a27338fd4ba333432ded6c5e9a809b5a30e84a51f367a3e4a181b89265
-
SHA512
31eb1f405bbb92c0070a898397d0df5820dfe57960c624245580ab06048a0d0ecbf596fe08ee51be0d1a9346a59c9d76c8179121d0628fce08ac0cf6c0701b47
-
SSDEEP
1536:vQLUbE4gc1Bm+nBKsC0RG+vt9aWn+Lq5Xet4akuRbNhCuckU+YI2/eD09w23emaS:NV31BmoBd9G+vLaWnreChuppcX+YN/eo
Malware Config
Signatures
Files
-
ead919a27338fd4ba333432ded6c5e9a809b5a30e84a51f367a3e4a181b89265.exe windows x86
fa43e3d2823c73100fe74d3091049bfe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
RtlMoveMemory
gdi32
MoveToEx
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DialogBoxIndirectParamA
MessageBoxA
DialogBoxParamA
GetWindow
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ