Static task
static1
Behavioral task
behavioral1
Sample
ea5243b0bb513038d8f41ff6652261b98a30b53ab1e1709f782d539c8d2999ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea5243b0bb513038d8f41ff6652261b98a30b53ab1e1709f782d539c8d2999ba.exe
Resource
win10v2004-20220812-en
General
-
Target
ea5243b0bb513038d8f41ff6652261b98a30b53ab1e1709f782d539c8d2999ba
-
Size
265KB
-
MD5
f8e127b48ab481ebb06cf9c8f9a9fa7c
-
SHA1
27b7e2b2afcbf6f7477eb7834924890a1e82e8bc
-
SHA256
ea5243b0bb513038d8f41ff6652261b98a30b53ab1e1709f782d539c8d2999ba
-
SHA512
a9b450f0df828bb0d085a96420f95d2b1e0d6f4eb83579d126ccb7bf592a675846a4e929e98ca0355a25bfb13bb52fc39e1e524384c76225c56b9707a541397f
-
SSDEEP
6144:m+lXbW+BfrEIsEreTDA91yXOPr92odusI3F/tRSdKb:3lrPlEIsIussM96fRS0
Malware Config
Signatures
Files
-
ea5243b0bb513038d8f41ff6652261b98a30b53ab1e1709f782d539c8d2999ba.exe windows x86
5a3ee38af4e756ea7325408a604ab5c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
WaitForSingleObject
CreateSemaphoreW
EnumDateFormatsExA
ReleaseSemaphore
GetCommandLineW
GetProcAddress
LoadLibraryW
FreeLibrary
DeleteFileW
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
GetCurrentThreadId
FoldStringW
GetLocaleInfoW
Sleep
oleaut32
SafeArrayDestroyDescriptor
SysAllocStringByteLen
SafeArraySetIID
SysReAllocStringLen
OleIconToCursor
ClearCustData
SetOaNoCache
msvfw32
ICInfo
Sections
.text Size: 169KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ