eaa54cf89d08f38085510881044486cb37694e4a01710aa0f439f62c438f9a20 | Triage

Submit
Reports

Overview

overview

1

Static

static

eaa54cf89d...20.exe

windows7-x64

1

eaa54cf89d...20.exe

windows10-2004-x64

1

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

eaa54cf89d08f38085510881044486cb37694e4a01710aa0f439f62c438f9a20.exe

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

eaa54cf89d08f38085510881044486cb37694e4a01710aa0f439f62c438f9a20.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

General

Target

eaa54cf89d08f38085510881044486cb37694e4a01710aa0f439f62c438f9a20
Size

20KB
MD5

01e4803abbf22508d4ee2a4ffbc7119b
SHA1

8e87a83bd181fff31002f4be141aa343ea61befa
SHA256

eaa54cf89d08f38085510881044486cb37694e4a01710aa0f439f62c438f9a20
SHA512

672a7b56d97a4c624681a18d2fd15fbf7bd431cf42f921359c3b64a0be2400ecbc3668f3ff12113c567f430b83d14445d29e92c1ad3b63b6dbe5ec1993925bf7
SSDEEP

96:rcyoYeiUkT43YLovlEHShcCl5+xvdXVFSUvTCmoy0ev1P4WmBT/WZzhxd69bUY5R:YyoSL6lfOClsvHlCmoyXCWmBT/W+R

Score

N/A

Malware Config

Signatures

Files

eaa54cf89d08f38085510881044486cb37694e4a01710aa0f439f62c438f9a20
.exe windows x86

fc6e3c438e6d60990a7c9549f8eb9aa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sqlunirl

_DeleteFile@4

autowiz

DoAutoPilotWithTracefile
DoAutoPilotWizard

pfutil80

??1CSharedMemory@@UAE@XZ
?MeFirst@CSharedMemory@@QAEHXZ
??0CSharedMemory@@QAE@IPBG@Z
?Lock@CSharedMemory@@QAEHXZ
?Unlock@CSharedMemory@@QAEHXZ

msvcrt

?terminate@@YAXXZ
exit
_wcmdln
_XcptFilter
memset
__CxxFrameHandler
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
wcscpy
wcschr
_except_handler3
_exit
_adjust_fdiv
__setusermatherr
__wgetmainargs
_initterm
_controlfp
__p__commode
__p__fmode
__set_app_type

kernel32

GetStartupInfoW
GetModuleHandleW

Exports

Exports

??0CSharedMemory@@QAE@ABV0@@Z
??4CSharedMemory@@QAEAAV0@ABV0@@Z
??_7CSharedMemory@@6B@

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erdata
Size: 586B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

© 2018-2024

Terms | Privacy