Static task
static1
Behavioral task
behavioral1
Sample
c1f9ce63966ea1c951f0bfd2af3e27b9f34fff31144802a84ae0e43e176eb392.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1f9ce63966ea1c951f0bfd2af3e27b9f34fff31144802a84ae0e43e176eb392.exe
Resource
win10v2004-20220812-en
General
-
Target
c1f9ce63966ea1c951f0bfd2af3e27b9f34fff31144802a84ae0e43e176eb392
-
Size
769KB
-
MD5
66123594e676ec0ddd76c5610546c247
-
SHA1
4b5c104601b4d40f44449be393541b509551e0dd
-
SHA256
c1f9ce63966ea1c951f0bfd2af3e27b9f34fff31144802a84ae0e43e176eb392
-
SHA512
0abec401cd85c8f15cdc7ee47e734e6e27e8b9b5cadd834fa37997f1810338b871fabd51d1de1251ca26b0bb8817aba3730f3eeb6431ce69c0a0a97ac98869ad
-
SSDEEP
12288:cWlgjzKK7J1jqtuD+LfNRWz2cg0b15FWASjbOWSoCTvI3bHVhgcWoe9:UjztOuD++z2cg0b1BS2nvIr1hg0e
Malware Config
Signatures
Files
-
c1f9ce63966ea1c951f0bfd2af3e27b9f34fff31144802a84ae0e43e176eb392.exe windows x86
0f31e2193cc08b61bb8a03e480a53b08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetFileType
CreateMutexA
DeleteFileA
Sleep
FindClose
CreateDirectoryW
RemoveDirectoryA
SetStdHandle
GetTickCount
GetDriveTypeA
VirtualProtectEx
ReleaseMutex
WriteFile
ResetEvent
HeapFree
CreateFileMappingW
CreateFileA
ReleaseSemaphore
FindClose
WriteConsoleW
lstrlenA
GetCommandLineA
RemoveDirectoryA
OpenEventW
user32
DestroyMenu
GetWindowLongA
IsWindow
CreateIcon
MessageBoxA
FindWindowA
DrawTextW
IsZoomed
PeekMessageA
GetClassInfoA
DispatchMessageA
GetSysColor
DestroyMenu
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ