Static task
static1
Behavioral task
behavioral1
Sample
f5cc90854a0e0314dc3d6adc6c161eea29c69246d813d19d4c9622d925202b93.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f5cc90854a0e0314dc3d6adc6c161eea29c69246d813d19d4c9622d925202b93.exe
Resource
win10v2004-20220812-en
General
-
Target
f5cc90854a0e0314dc3d6adc6c161eea29c69246d813d19d4c9622d925202b93
-
Size
769KB
-
MD5
8f7d269f83637b1ec223b1ae6b7eff94
-
SHA1
1de0eb21549efff4964cb33f07631249d707e53b
-
SHA256
f5cc90854a0e0314dc3d6adc6c161eea29c69246d813d19d4c9622d925202b93
-
SHA512
6c9a5665fb0f1e2715d966bb0b453bddc91316d4c5efad828374726899d7417a04421446d877aa57617e2608e52d81ef1019ff2faf3d89694b75910f8183b6a9
-
SSDEEP
12288:yRNtIIt/eKrKdPH2IpicI1CthDb1Lp2xlp4WKviIM+OlMbzhU63058v6e:mNt3/gdi5CthHn2xlpRYjMnlW2bmie
Malware Config
Signatures
Files
-
f5cc90854a0e0314dc3d6adc6c161eea29c69246d813d19d4c9622d925202b93.exe windows x86
cabe6d885b8f551df94ff182bec1dc9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
FindClose
RemoveDirectoryA
HeapFree
WriteConsoleW
CreateFileA
RemoveDirectoryA
GetCommandLineA
CreateDirectoryW
ReleaseMutex
GetTickCount
Sleep
DeleteFileA
ReleaseSemaphore
GetModuleHandleA
GetFileType
WriteFile
OpenEventW
SetStdHandle
lstrlenA
CreateMutexA
FindClose
GetDriveTypeA
ResetEvent
CreateFileMappingW
user32
GetClassInfoA
MessageBoxA
DrawTextW
IsWindow
CreateIcon
GetWindowLongA
DestroyMenu
DispatchMessageA
DestroyMenu
PeekMessageA
GetSysColor
FindWindowA
IsZoomed
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ