Static task
static1
Behavioral task
behavioral1
Sample
eff2822cb8ef7d7a862b55c854e35c79f04c4a31f743a30db4efe9456a8a2aac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eff2822cb8ef7d7a862b55c854e35c79f04c4a31f743a30db4efe9456a8a2aac.exe
Resource
win10v2004-20221111-en
General
-
Target
eff2822cb8ef7d7a862b55c854e35c79f04c4a31f743a30db4efe9456a8a2aac
-
Size
465KB
-
MD5
030305e8548108ab4e0bcaf548455320
-
SHA1
be70bd8a082135f81fb5e83bb741d76f4a9f5b98
-
SHA256
eff2822cb8ef7d7a862b55c854e35c79f04c4a31f743a30db4efe9456a8a2aac
-
SHA512
4ec526d7e9f3439bd26ed130ffae973c636246dad2f11381ff6d55af6f8a7e0152eac9c9592a00406463cdc7b855193c3bf60f8381046ccf74ce0c18993688e3
-
SSDEEP
12288:T/6FwtQxaOsNqwauQzu6tdyiRLL1JzT4Uxp:rSx1GaPtd7LL1J34UH
Malware Config
Signatures
Files
-
eff2822cb8ef7d7a862b55c854e35c79f04c4a31f743a30db4efe9456a8a2aac.exe windows x86
3a65718aa6d94aba53a1647f062b5ec2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetConsoleAliasW
SetEnvironmentVariableA
GetStringTypeW
VirtualAlloc
CreateFileMappingW
SetFilePointer
GetACP
GetModuleHandleW
GetShortPathNameW
Heap32First
DeleteFileA
GetStringTypeW
Heap32Next
DeleteFileA
WriteConsoleW
DeleteFileA
GetProcessHeap
GetConsoleTitleA
SetEndOfFile
SetCurrentDirectoryA
LoadLibraryA
CreateMailslotW
msoeacct
DllGetClassObject
GetDllMajorVersion
ValidEmailAddress
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ