Static task
static1
Behavioral task
behavioral1
Sample
ea3098a33120c6d548a6127fc214d223eac427939675d96f83cb94269cd834cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea3098a33120c6d548a6127fc214d223eac427939675d96f83cb94269cd834cb.exe
Resource
win10v2004-20220812-en
General
-
Target
ea3098a33120c6d548a6127fc214d223eac427939675d96f83cb94269cd834cb
-
Size
305KB
-
MD5
3aaae741aaefe2c1d98b76ac8481497e
-
SHA1
ab35ebe20528da283137e62b526a92f85f692124
-
SHA256
ea3098a33120c6d548a6127fc214d223eac427939675d96f83cb94269cd834cb
-
SHA512
86b0ecd66e4f81b0974ae27d8736a9163498e5d880b155668bf9408ae742528604018c02a0de9c5d19abc0ef28b922f3f5be792ff4b14a0f5a96ccd0f278b5c2
-
SSDEEP
6144:SV+yYxZbqKy+FUr0HbVE8lYiyt3Y/Solhdvtm3N/ipAovwc3WrI3DBO:SV3YxZ+Ky+Fk6b5lYHU3VSCA3cGrwM
Malware Config
Signatures
Files
-
ea3098a33120c6d548a6127fc214d223eac427939675d96f83cb94269cd834cb.exe windows x86
efd3ecf1d6cea327eb89b284b2efd14f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
SetEndOfFile
CreateFileA
GetEnvironmentVariableA
InitializeCriticalSection
ResetEvent
ExitProcess
WaitForSingleObject
GetTickCount
ReleaseMutex
GetTickCount
HeapCreate
HeapDestroy
GetFileSize
CloseHandle
SetLastError
CreateMutexW
SuspendThread
FindClose
AddAtomA
GetCurrentDirectoryA
DeleteFileA
GetModuleHandleA
GetProfileIntW
HeapSize
shell32
StrChrA
DragFinish
ExtractIconA
ShellAboutA
DllUnregisterServer
DuplicateIcon
SHGetDiskFreeSpaceA
SHFree
ShellMessageBoxA
SHGetMalloc
DragQueryFileA
SHGetSettings
DragAcceptFiles
dpmodemx
SPInit
SPInit
SPInit
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ