Static task
static1
Behavioral task
behavioral1
Sample
eb6edb7907d838ddaf9871a7d34db7fe4bb415fac55f5e1b1b50165a681fc6a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb6edb7907d838ddaf9871a7d34db7fe4bb415fac55f5e1b1b50165a681fc6a6.exe
Resource
win10v2004-20220812-en
General
-
Target
eb6edb7907d838ddaf9871a7d34db7fe4bb415fac55f5e1b1b50165a681fc6a6
-
Size
309KB
-
MD5
0e189fa47ef3c4074af701883d4f7ad0
-
SHA1
c5dee57978da703822122baa2426fa3efa41138f
-
SHA256
eb6edb7907d838ddaf9871a7d34db7fe4bb415fac55f5e1b1b50165a681fc6a6
-
SHA512
fe1313f520a0ff36e25377c7cf5e628c8a3dc34e32d1299ebee16f572ec5b9d9920e952f08e5a8bae98da97deb90a3fda0de3566f04b1db663281dc41f996269
-
SSDEEP
6144:fvfCDxwFXVYaLtFCA0rjtwyU0XT/fGg0/Pazs:fvfGwROaLtY5lwz0D2gO
Malware Config
Signatures
Files
-
eb6edb7907d838ddaf9871a7d34db7fe4bb415fac55f5e1b1b50165a681fc6a6.exe windows x86
4779cc7b42dd1b062e0c6c0f02db0270
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceW
WriteFileEx
GetLongPathNameA
GetModuleHandleW
SetEnvironmentVariableA
GetDiskFreeSpaceW
lstrcpyW
GetExitCodeProcess
WaitForSingleObject
lstrcmpA
ExitProcess
GetPrivateProfileIntA
Heap32First
GetStringTypeW
InterlockedIncrement
VirtualAllocEx
GetCurrentDirectoryA
GetACP
GetPrivateProfileSectionA
InterlockedDecrement
FindResourceW
LoadLibraryA
GetPrivateProfileIntA
apphelp
SdbCreateMsiTransformFile
AllowPermLayer
ApphelpCheckIME
ApphelpCheckExe
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE