Static task
static1
Behavioral task
behavioral1
Sample
ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5.exe
Resource
win10v2004-20221111-en
General
-
Target
ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5
-
Size
307KB
-
MD5
a0d21b621ec55a796199188c1538d757
-
SHA1
fb40f64ea2ecf8656bf3336b8709fc1edebd2bce
-
SHA256
ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5
-
SHA512
c56b7849cc1349d7f4b15537fb3ab1d7f8e8d73dc1725f6ee75e94e4c77bd3e3887898ca8b2849abd841bfe9f8672d709e691c85faa5585aadd0255556a195fc
-
SSDEEP
6144:36kg9aRhVpgTNX9MZTgQBzzl/NcuFT6sDBF0LqOGe/03WS7SAOA:3GqUTNX9MRBzzl/Ncu0sWqOFOWUOA
Malware Config
Signatures
Files
-
ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5.exe windows x86
621bed5eb6fe7f30a98a2dc0f7fc77c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
Sleep
GetExitCodeProcess
Sleep
GetPrivateProfileSectionA
Sleep
OpenMutexA
CreateEventA
HeapCreate
WaitForMultipleObjects
GetFileAttributesA
InterlockedExchange
lstrcmpA
LoadLibraryExW
GetModuleHandleA
GetPrivateProfileIntW
GetDiskFreeSpaceA
SetFilePointer
CreateDirectoryW
GetPrivateProfileIntW
GetPriorityClass
GetDiskFreeSpaceA
lstrcmpiA
catsrv
CreateComponentLibraryTS
OpenComponentLibraryTS
GetCatalogCRMClerk
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE