Static task
static1
Behavioral task
behavioral1
Sample
dba19ba3083527d0db6ad1834b917428cee100570daafda7fb682103f647ae89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dba19ba3083527d0db6ad1834b917428cee100570daafda7fb682103f647ae89.exe
Resource
win10v2004-20220812-en
General
-
Target
dba19ba3083527d0db6ad1834b917428cee100570daafda7fb682103f647ae89
-
Size
769KB
-
MD5
b7524dfab534b6658ef76fb601d1d870
-
SHA1
709684f405404a2dd0a91d2384a6fa99807107bd
-
SHA256
dba19ba3083527d0db6ad1834b917428cee100570daafda7fb682103f647ae89
-
SHA512
1643463bfecde13150b2a22e4cb9b1c1727fcfc3b26e1bbbf51db36259f14b53c9d1756377f0ed78a5c94af1101b8b78afe4f9f1748466fdfb1e394558d20937
-
SSDEEP
24576:jK4ryJXaJ9lFottVfTF37z2Ai7c0cFF/ZVVSMNjo:jbryOFottBZDi7cVSMNc
Malware Config
Signatures
Files
-
dba19ba3083527d0db6ad1834b917428cee100570daafda7fb682103f647ae89.exe windows x86
7c327273a9f5708a90b4c85bcce93c81
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
OpenEventW
FindClose
WriteFile
FindClose
GetDriveTypeA
DeleteFileA
WriteConsoleW
lstrlenA
RemoveDirectoryA
CreateFileA
Sleep
GetCommandLineA
CreateFileMappingW
CreateMutexA
HeapFree
ReleaseMutex
CreateDirectoryW
GetFileType
ReleaseSemaphore
ResetEvent
GetTickCount
SetStdHandle
GetModuleHandleA
VirtualProtectEx
user32
GetSysColor
DestroyMenu
DispatchMessageA
CreateIcon
PeekMessageA
DrawTextW
GetClassInfoA
GetWindowLongA
IsWindow
FindWindowA
MessageBoxA
DestroyMenu
IsZoomed
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ