Static task
static1
Behavioral task
behavioral1
Sample
dc12367c28b79d0ba4817e494f2dd3c76495a80fd062b81a4e99324ad97732f1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc12367c28b79d0ba4817e494f2dd3c76495a80fd062b81a4e99324ad97732f1.exe
Resource
win10v2004-20220901-en
General
-
Target
dc12367c28b79d0ba4817e494f2dd3c76495a80fd062b81a4e99324ad97732f1
-
Size
93KB
-
MD5
d4454e0ca045e501faf9f2dd985a7fb5
-
SHA1
b4a7789f37dfd7bd74243bc40ac10322d3d83a13
-
SHA256
dc12367c28b79d0ba4817e494f2dd3c76495a80fd062b81a4e99324ad97732f1
-
SHA512
6bfd87feac51e0a0b75d88d61806e74863553477d1cdcef408e77d0c32d7df7bf3877f2fe637537868c881477383c49481f64052cdf1dd2c4d5715dc35f57c96
-
SSDEEP
1536:4pR73BJPWj7Kc2OeReyO+qgkMxE3h4BF7yPIxAVN48C+:4r73BhWj2OeRevO6hCyuKN4a
Malware Config
Signatures
Files
-
dc12367c28b79d0ba4817e494f2dd3c76495a80fd062b81a4e99324ad97732f1.exe windows x86
ebe41764b5ca99e068376f9d3dd9cc7c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
ResetEvent
GetFileType
WriteConsoleW
ReleaseMutex
CreateFileA
SetStdHandle
GetCommandLineA
VirtualProtectEx
ReleaseSemaphore
DeleteFileA
OpenEventW
FindClose
RemoveDirectoryA
Sleep
GetModuleHandleA
CreateFileMappingW
FindClose
GetTickCount
RemoveDirectoryA
lstrlenA
WriteFile
CreateDirectoryW
CreateMutexA
GetDriveTypeA
user32
CreateIcon
PeekMessageA
MessageBoxA
DestroyMenu
IsWindow
GetClassInfoA
GetWindowLongA
IsZoomed
GetSysColor
DestroyMenu
DrawTextW
FindWindowA
DispatchMessageA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ