?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
eaf599c62df4d8e1b5bece531cbc32209dd1d987fb18e57eb81e8d1ae0b0986f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaf599c62df4d8e1b5bece531cbc32209dd1d987fb18e57eb81e8d1ae0b0986f.exe
Resource
win10v2004-20220812-en
General
-
Target
eaf599c62df4d8e1b5bece531cbc32209dd1d987fb18e57eb81e8d1ae0b0986f
-
Size
163KB
-
MD5
2ded5c327c1bb4b81f154cac72d0292b
-
SHA1
38c10921c9fcd444929ef1b584bb15809d1aa29d
-
SHA256
eaf599c62df4d8e1b5bece531cbc32209dd1d987fb18e57eb81e8d1ae0b0986f
-
SHA512
1e312ce77996f247bd30ad74c0960691844ae76c1004592c9a4c2b5ecd29c6769881d8bb59aadabae3ff30910b8746d6da43ae402492973c695e4dcf3d3de63f
-
SSDEEP
3072:5gBDhkZNF5UZ41ng6mFho9wjCZNBtKoqHfzYiEParM0ZeTm1nnAdfVWqdcW:5gB1kZNjUmPu0OHfzTEPqM0Zey1nnAdx
Malware Config
Signatures
Files
-
eaf599c62df4d8e1b5bece531cbc32209dd1d987fb18e57eb81e8d1ae0b0986f.exe windows x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ