Static task
static1
Behavioral task
behavioral1
Sample
eb659e61c023b6cea9b4e1da5128552c6e8e40f2db90bae76a8ecd3750ed6e2c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb659e61c023b6cea9b4e1da5128552c6e8e40f2db90bae76a8ecd3750ed6e2c.exe
Resource
win10v2004-20221111-en
General
-
Target
eb659e61c023b6cea9b4e1da5128552c6e8e40f2db90bae76a8ecd3750ed6e2c
-
Size
154KB
-
MD5
01f9a452efcf82669e4a73e729bccd1a
-
SHA1
96f8a65c8dec4acc8efc4784b3954475449ae62c
-
SHA256
eb659e61c023b6cea9b4e1da5128552c6e8e40f2db90bae76a8ecd3750ed6e2c
-
SHA512
0b142105212031941f882cf9983ab4b8c3a3b279207521b82310741df674e9964b16a8904796e761c8d5ce0142e8c9af426abe48498bceb9d4ade028afce86c7
-
SSDEEP
3072:MmNOBVlad3xV7Qbv1cBAdapaQxsXQlTsholKEN6:MmAl43cZdapeAl4yTN
Malware Config
Signatures
Files
-
eb659e61c023b6cea9b4e1da5128552c6e8e40f2db90bae76a8ecd3750ed6e2c.exe windows x86
a19a1b3683f3173b3e7c452ed4c91526
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
VirtualAlloc
CreateFileW
LeaveCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
SetLastError
LocalFree
FormatMessageA
SetConsoleCtrlHandler
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
CreateProcessA
SearchPathA
GetStartupInfoA
GetModuleFileNameW
GetShortPathNameW
lstrcatW
lstrlenW
DeleteFileW
WriteFile
CloseHandle
CreateSemaphoreW
GetVersionExW
user32
GetSystemMetrics
gdi32
GetStockObject
GetObjectW
SetTextColor
SetBkMode
CreatePen
SelectObject
Polyline
DeleteObject
CreateFontIndirectW
msvcrt
_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_vsnwprintf
__set_app_type
_controlfp
setlocale
mbstowcs
advapi32
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data24 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data23 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data21 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data20 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data19 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data5 Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text14 Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text13 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text12 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ