Static task
static1
Behavioral task
behavioral1
Sample
eace628e1836bc88c3d0c145bbe29dc61f1acc61046431e6f17f0e04ddb2f373.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eace628e1836bc88c3d0c145bbe29dc61f1acc61046431e6f17f0e04ddb2f373.exe
Resource
win10v2004-20221111-en
General
-
Target
eace628e1836bc88c3d0c145bbe29dc61f1acc61046431e6f17f0e04ddb2f373
-
Size
222KB
-
MD5
bdf87067c7d9ab89954750526ab7dc68
-
SHA1
306a4ac6ea9ee02e13afe660900cba247cd282de
-
SHA256
eace628e1836bc88c3d0c145bbe29dc61f1acc61046431e6f17f0e04ddb2f373
-
SHA512
54631946a926b0d40f53b1a7f8d97e74c413df95950f136b718deb56a2937d902ae5d5fc01d66c3fa4660451176f8b6ff324fef68249b812d40987464c0aa370
-
SSDEEP
3072:Y91zTFXOhQjncpx+mzZTiU2giLRJu7ayhkZpoJEb3yS5V0CQIX5kJjNY9vXev3N3:YVOhVFtTiUv3bqbCS5eRI6JpkvK3R15
Malware Config
Signatures
Files
-
eace628e1836bc88c3d0c145bbe29dc61f1acc61046431e6f17f0e04ddb2f373.exe windows x86
5bf20da3ec9e8ca78004d610a8c8e35d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetThreadContext
LoadResource
ResumeThread
RtlCaptureContext
RtlCaptureStackBackTrace
RtlFillMemory
RtlMoveMemory
FreeResource
RtlZeroMemory
SetThreadContext
VerSetConditionMask
VirtualAllocEx
WriteProcessMemory
lstrcatW
lstrlenW
FindResourceA
ExitProcess
RtlUnwind
CreateProcessW
ntdll
ZwUnmapViewOfSection
advapi32
RegOpenKeyExW
RegSetValueExW
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 758B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE