Static task
static1
Behavioral task
behavioral1
Sample
ea588460bcda6489ab3f2b7caf0cc9ad03f75f083c3a7ee9257ad32c6afb5272.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ea588460bcda6489ab3f2b7caf0cc9ad03f75f083c3a7ee9257ad32c6afb5272.exe
Resource
win10v2004-20220812-en
General
-
Target
ea588460bcda6489ab3f2b7caf0cc9ad03f75f083c3a7ee9257ad32c6afb5272
-
Size
195KB
-
MD5
2af1bd0b9e548902d36385316ec98240
-
SHA1
7e7c762e2760fe6d25205cb29077574fa6080565
-
SHA256
ea588460bcda6489ab3f2b7caf0cc9ad03f75f083c3a7ee9257ad32c6afb5272
-
SHA512
429a5ce89b1a1be1396f742b794e7eac15d55741ed20018d4d0a0abbede8c996a0f3d7b235839e73601c9604d6648656ecdfea140fae93e5c00d66ce7f05c96a
-
SSDEEP
3072:0efb3pKMnm/wCYixWzyBYDUWv+TG8YWAYi3melsb056:xfbZKMwZBzfYHhzsb0o
Malware Config
Signatures
Files
-
ea588460bcda6489ab3f2b7caf0cc9ad03f75f083c3a7ee9257ad32c6afb5272.exe windows x86
3f5364f1c454337f4b2910033e2f79dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shell32
SHGetMalloc
Shell_NotifyIconA
SHBrowseForFolderA
ShellExecuteExA
kernel32
GetSystemDirectoryA
TlsGetValue
WriteConsoleW
lstrcmpiA
GetModuleHandleA
VirtualAlloc
GetCurrentDirectoryA
GetStartupInfoA
comctl32
ImageList_Create
CreateToolbarEx
ImageList_DrawEx
CreatePropertySheetPageA
msvcrt
_splitpath
memcpy
_adjust_fdiv
__p__commode
__setusermatherr
_heapwalk
_sys_nerr
_except_handler3
_XcptFilter
_ismbbalpha
__set_app_type
__getmainargs
_control87
_acmdln
_initterm
_ui64toa
__p__fmode
_controlfp
_exit
exit
comdlg32
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
FindTextA
user32
SystemParametersInfoA
GetMenu
CheckRadioButton
EndDeferWindowPos
gdi32
CreateRectRgnIndirect
GetObjectA
SetTextAlign
RectInRegion
DeleteObject
Rectangle
RestoreDC
EndPage
ole32
CoCreateInstance
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ