Static task
static1
Behavioral task
behavioral1
Sample
ea38961547c02f9681241de95a958ea71a92cafe180547f7efff0abee5d6a255.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea38961547c02f9681241de95a958ea71a92cafe180547f7efff0abee5d6a255.exe
Resource
win10v2004-20221111-en
General
-
Target
ea38961547c02f9681241de95a958ea71a92cafe180547f7efff0abee5d6a255
-
Size
43KB
-
MD5
9e0c08a2be8d7899f33f8412ba8ae712
-
SHA1
4097b60f856748bdd535c47c5599701466ef6b88
-
SHA256
ea38961547c02f9681241de95a958ea71a92cafe180547f7efff0abee5d6a255
-
SHA512
6c20b15ec8e1f842b50f44407a76bbd1e755e21146efbb250e8b1003cf0bb6f4c49b35052bb58562ea29254ff74ad601b4eac15d9dcd255ff1213d2475fffa21
-
SSDEEP
384:s6keKXNTrT6HDDDk/Wme2qxb+mC6VNwUKtR/bWAOJ71:swQTxi2tmHVNwfWAOJ7
Malware Config
Signatures
Files
-
ea38961547c02f9681241de95a958ea71a92cafe180547f7efff0abee5d6a255.exe windows x86
6fdd964a8cac3f9a38a58b9b463142c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileA
GetDriveTypeA
CreateDirectoryW
GetModuleHandleA
FindClose
ReleaseMutex
CreateFileMappingW
CreateFileA
RemoveDirectoryA
CreateMutexA
FindClose
SetStdHandle
VirtualProtectEx
WriteFile
ReleaseSemaphore
HeapFree
WriteConsoleW
GetCommandLineA
ResetEvent
lstrlenA
GetFileType
OpenEventW
GetTickCount
RemoveDirectoryA
user32
GetClassInfoA
MessageBoxA
DispatchMessageA
DrawTextW
IsWindow
DestroyMenu
FindWindowA
DestroyMenu
GetWindowLongA
PeekMessageA
IsZoomed
CreateIcon
GetSysColor
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ