Static task
static1
Behavioral task
behavioral1
Sample
daeff6c1b4426cee1026e88e5809bb0e9fe399b82c4f1bcb2bb96738529e1a0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
daeff6c1b4426cee1026e88e5809bb0e9fe399b82c4f1bcb2bb96738529e1a0c.exe
Resource
win10v2004-20220812-en
General
-
Target
daeff6c1b4426cee1026e88e5809bb0e9fe399b82c4f1bcb2bb96738529e1a0c
-
Size
769KB
-
MD5
0caf3754b62bea0af8fad069f78a8c2b
-
SHA1
4d16a52a87023a82099af6c8687353974813d189
-
SHA256
daeff6c1b4426cee1026e88e5809bb0e9fe399b82c4f1bcb2bb96738529e1a0c
-
SHA512
bd1114bed6124e54f1d7902331df131412d277dd730edf4a1f336c5b4f46a64ef7e1bc07bd4ffa0081629111149a5b90c2edbff4b978caa78102bae19eaeeba9
-
SSDEEP
12288:GWlgjzKK7J1jqtuD+LfNRWz2cg0b15FWASjbOWSoCTvI3bHVhgcWoe9:GjztOuD++z2cg0b1BS2nvIr1hg0e
Malware Config
Signatures
Files
-
daeff6c1b4426cee1026e88e5809bb0e9fe399b82c4f1bcb2bb96738529e1a0c.exe windows x86
fde8f9f486ef898508d686c9204b606a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetTickCount
FindClose
CreateFileMappingW
CreateMutexA
OpenEventW
GetCommandLineA
WriteConsoleW
lstrlenA
ReleaseSemaphore
GetDriveTypeA
FindClose
RemoveDirectoryA
HeapFree
CreateDirectoryW
WriteFile
ResetEvent
ReleaseMutex
CreateFileA
GetModuleHandleA
GetFileType
DeleteFileA
VirtualProtectEx
Sleep
RemoveDirectoryA
user32
MessageBoxA
PeekMessageA
GetSysColor
DestroyMenu
CreateIcon
FindWindowA
GetClassInfoA
DispatchMessageA
IsZoomed
GetWindowLongA
DestroyMenu
DrawTextW
IsWindow
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ