EeZEBf6T@12
Static task
static1
Behavioral task
behavioral1
Sample
c090df19caaf1510cc2ef73b9f5ea0c2de968fe1aedb1090c6b0b13b6a5ecebe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c090df19caaf1510cc2ef73b9f5ea0c2de968fe1aedb1090c6b0b13b6a5ecebe.exe
Resource
win10v2004-20220901-en
General
-
Target
c090df19caaf1510cc2ef73b9f5ea0c2de968fe1aedb1090c6b0b13b6a5ecebe
-
Size
98KB
-
MD5
d590ce8c7a2d5f676476fb50f1ec102c
-
SHA1
414a88c0bac91ced2af4e231845956c640395961
-
SHA256
c090df19caaf1510cc2ef73b9f5ea0c2de968fe1aedb1090c6b0b13b6a5ecebe
-
SHA512
4d065f6a0807eb48520abbe0a6a97dfc17dbed19e98b0900078d4be925d64b13f9e9d3f4a53d987a28d66324d8347816f07c2d64b68c0d383146da4af5da49d5
-
SSDEEP
1536:pdwL+rBVoqTLKRqHlMIlc+JSQbYuzkGffTwtG4ESoF5w9H4aQUGFNZAesNoiW4m3:3kH5qrfFQGsMbp7w9HbQuNoi3a
Malware Config
Signatures
Files
-
c090df19caaf1510cc2ef73b9f5ea0c2de968fe1aedb1090c6b0b13b6a5ecebe.exe windows x86
d5f9d10594a27362b462ff005e74b817
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderLocation
DragQueryFileA
kernel32
GetModuleHandleA
ExitProcess
GetEnvironmentStrings
GlobalAlloc
CreateFileA
GetFileAttributesA
DeleteCriticalSection
GetDiskFreeSpaceA
CreateEventA
VirtualAlloc
ReadFile
GetFullPathNameA
MulDiv
RaiseException
LockResource
CreateThread
LoadLibraryExA
MoveFileA
WriteFile
GetVersionExA
lstrlenA
GetUserDefaultLCID
LoadLibraryA
user32
GetActiveWindow
IsRectEmpty
IsWindow
GetMenu
IsIconic
IsCharLowerA
LoadIconA
IsWindowEnabled
IsDialogMessageA
shlwapi
PathFileExistsA
SHStrDupA
SHDeleteValueA
SHGetValueA
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ