Static task
static1
Behavioral task
behavioral1
Sample
cab71e7461491c330517d645052406dee2241b7cacd1bbf4afd772ed377338a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cab71e7461491c330517d645052406dee2241b7cacd1bbf4afd772ed377338a9.exe
Resource
win10v2004-20220812-en
General
-
Target
cab71e7461491c330517d645052406dee2241b7cacd1bbf4afd772ed377338a9
-
Size
769KB
-
MD5
38a3caa9010f08523ff2a76373ba7aa4
-
SHA1
646167c94d145ffc2b638103ccd4a641885b6324
-
SHA256
cab71e7461491c330517d645052406dee2241b7cacd1bbf4afd772ed377338a9
-
SHA512
6d5aac7824bc7e5712dc349159c696b31cd7f6799a06a5ba68e126e2450d03b4c9c5b34b252743ea9e13d31334dcdc466ca5e76835ad1fee813f0b83261f4357
-
SSDEEP
24576:A1cR/8Xy2oUr7wxKNo831mniZ6uxd0uKdcaW:A1zXy2oUk4FJxhKdx
Malware Config
Signatures
Files
-
cab71e7461491c330517d645052406dee2241b7cacd1bbf4afd772ed377338a9.exe windows x86
256a8befa41006044cc96dead20d704b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
FindClose
GetVersion
SetStdHandle
RemoveDirectoryA
VirtualProtectEx
ReleaseSemaphore
CreateDirectoryW
DeleteFileA
OpenEventW
ResetEvent
GetModuleHandleA
WriteConsoleW
GetCommandLineA
RemoveDirectoryA
CreateFileA
GetDriveTypeA
FindClose
CreateFileMappingW
CreateMutexA
GetFileType
Sleep
lstrlenA
WriteFile
ReleaseMutex
user32
IsWindow
GetClassInfoA
DestroyMenu
DrawTextW
GetSysColor
FindWindowA
IsZoomed
DispatchMessageA
PeekMessageA
CreateIcon
DestroyMenu
MessageBoxA
GetWindowLongA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ