Static task
static1
Behavioral task
behavioral1
Sample
d9f56266bec8384eff922a0bff4441ea8dbd54ac0717c7e656c4d78e54af1f4b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9f56266bec8384eff922a0bff4441ea8dbd54ac0717c7e656c4d78e54af1f4b.exe
Resource
win10v2004-20220812-en
General
-
Target
d9f56266bec8384eff922a0bff4441ea8dbd54ac0717c7e656c4d78e54af1f4b
-
Size
43KB
-
MD5
0cccd8ddf0ff0e608e3978ebd4de5d80
-
SHA1
da96371807a5048cb71332afb9f155d567029881
-
SHA256
d9f56266bec8384eff922a0bff4441ea8dbd54ac0717c7e656c4d78e54af1f4b
-
SHA512
0d770a474a6a3030655c96788de2817181107eebe6285af01fdc75e9ea77aca5095034bebf7f2d0aa2aa73a21680219624dd0e8334203632448f87cc00cec4fc
-
SSDEEP
384:cdpKqHDDD//Wme2qxx6+mC6VNwUKtRyKjSPLnUW9:UpKqi2iLmHVNwhjkL
Malware Config
Signatures
Files
-
d9f56266bec8384eff922a0bff4441ea8dbd54ac0717c7e656c4d78e54af1f4b.exe windows x86
49ee6f23bd4ff033a02c0d17713b49fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetFileType
GetCommandLineA
ResetEvent
OpenEventW
RemoveDirectoryA
FindClose
GetDriveTypeA
lstrlenA
VirtualProtectEx
DeleteFileA
CreateFileMappingW
ReleaseMutex
Sleep
SetStdHandle
ReleaseSemaphore
CreateDirectoryW
WriteConsoleW
CreateMutexA
GetTickCount
CreateFileA
WriteFile
FindClose
RemoveDirectoryA
GetModuleHandleA
user32
MessageBoxA
DestroyMenu
IsZoomed
GetSysColor
GetWindowLongA
FindWindowA
IsWindow
CreateIcon
DestroyMenu
GetClassInfoA
DrawTextW
PeekMessageA
DispatchMessageA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ