Static task
static1
Behavioral task
behavioral1
Sample
ebe9bacf4cc501669725b8b6b234bceab636d392b261e76e09708c34c3065aaf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ebe9bacf4cc501669725b8b6b234bceab636d392b261e76e09708c34c3065aaf.exe
Resource
win10v2004-20221111-en
General
-
Target
ebe9bacf4cc501669725b8b6b234bceab636d392b261e76e09708c34c3065aaf
-
Size
236KB
-
MD5
5086cf6df7fb8a58c12b640e67cec0e4
-
SHA1
4fffb66700f89273d2e69f68ea8e93729979c934
-
SHA256
ebe9bacf4cc501669725b8b6b234bceab636d392b261e76e09708c34c3065aaf
-
SHA512
fea1f92a6808be3288a1b7e6c42bc6f5b33adff60cb22e6f9065933a0b839a9ffb2b6c9cc9eea7ed2c096206b25a4ce5a14b061c063319058d30cfacb0c3b157
-
SSDEEP
6144:1J6Fiw5ol+WbbrIbIn95h794nw+LrH7o7ptE9:1Jmiw5pibrIUF7mn/Lz7Z
Malware Config
Signatures
Files
-
ebe9bacf4cc501669725b8b6b234bceab636d392b261e76e09708c34c3065aaf.exe windows x86
7fb37d8652e10c3046c777a828ee2bde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA
user32
CharLowerBuffA
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
advapi32
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
Sections
.text Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ