Static task
static1
Behavioral task
behavioral1
Sample
eebb781aab4af1f9b79951f44df44893cb34d401d25b980a89d8dc8eaef1361c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eebb781aab4af1f9b79951f44df44893cb34d401d25b980a89d8dc8eaef1361c.exe
Resource
win10v2004-20220901-en
General
-
Target
eebb781aab4af1f9b79951f44df44893cb34d401d25b980a89d8dc8eaef1361c
-
Size
103KB
-
MD5
1f28bb8d8d9a0f04d8fb8c8b6b6b8af0
-
SHA1
032526b6c3fab4c3b77dcaf871673d6546ee349d
-
SHA256
eebb781aab4af1f9b79951f44df44893cb34d401d25b980a89d8dc8eaef1361c
-
SHA512
24d86bf5dfc4d943fe69f0a1fddc413ecd4fd954c7d44ab614fa95892fbd0c0f6ebda8d1809e01c00e99dc853668460b3bc2c87868165fa57555de3883ec7a83
-
SSDEEP
1536:2yf79vGTIVBjTslS2WL+0u/14AAMQo2V80MFivcBs7lxtpSt6LqQzeVYp0AhvT:PYs3ISX9utzApvVDMacB0m6LT71T
Malware Config
Signatures
Files
-
eebb781aab4af1f9b79951f44df44893cb34d401d25b980a89d8dc8eaef1361c.exe windows x86
f7411e3f5f0542fc227ff8935a211418
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
send
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
__dllonexit
_onexit
srand
rand
sprintf
malloc
strtok
atoi
free
fopen
fclose
_adjust_fdiv
_controlfp
kernel32
GetModuleFileNameA
GetCommandLineA
GetTickCount
CreateFileA
WriteFile
CloseHandle
OutputDebugStringA
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA
DeleteFileA
user32
MessageBoxA
shell32
SHGetSpecialFolderPathA
SHGetFileInfoA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 658B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE