Static task
static1
Behavioral task
behavioral1
Sample
9655212b0a7385b36b01e03bb763ec3c068d3b286621726fcb919ba1ccf85947.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9655212b0a7385b36b01e03bb763ec3c068d3b286621726fcb919ba1ccf85947.exe
Resource
win10v2004-20221111-en
General
-
Target
9655212b0a7385b36b01e03bb763ec3c068d3b286621726fcb919ba1ccf85947
-
Size
769KB
-
MD5
226a6db2db6cf5bcc8da95e494b1a466
-
SHA1
8ef9842c1368d2865d394401233afc00cd54e03a
-
SHA256
9655212b0a7385b36b01e03bb763ec3c068d3b286621726fcb919ba1ccf85947
-
SHA512
b8dcd74b08c60591f4e2fe113d29b0008ef553da1b220d54f6680299032ec42e7feb93d6f429e3748762b9ed75b956db08329b94d3265ba4401e7a01572f0768
-
SSDEEP
12288:uqbPKqsSFxu8nEd8OecrhaDlnABNanGRALfXRE+OPSkSDp12wVz4Iu:uiCqzU8nfO3h6CNanAjHUz4Iu
Malware Config
Signatures
Files
-
9655212b0a7385b36b01e03bb763ec3c068d3b286621726fcb919ba1ccf85947.exe windows x86
4e5f5b6dcc990020a3b56f29251bed79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetFileType
lstrlenA
OpenEventW
GetModuleHandleA
RemoveDirectoryA
VirtualProtectEx
ReleaseSemaphore
FindClose
CreateDirectoryW
CreateFileA
GetDriveTypeA
Sleep
GetCommandLineA
HeapFree
FindClose
GetVersion
RemoveDirectoryA
CreateFileMappingW
DeleteFileA
WriteFile
WriteConsoleW
CreateMutexA
ResetEvent
ReleaseMutex
user32
CreateIcon
IsWindow
DispatchMessageA
DestroyMenu
FindWindowA
DestroyMenu
IsZoomed
MessageBoxA
GetWindowLongA
GetSysColor
PeekMessageA
GetClassInfoA
DrawTextW
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ