Static task
static1
Behavioral task
behavioral1
Sample
ee0adfa6f30757d7fcc0c95b9c950cde6e020d4c62b0fae3f72d183c1e00f0cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee0adfa6f30757d7fcc0c95b9c950cde6e020d4c62b0fae3f72d183c1e00f0cf.exe
Resource
win10v2004-20220812-en
General
-
Target
ee0adfa6f30757d7fcc0c95b9c950cde6e020d4c62b0fae3f72d183c1e00f0cf
-
Size
124KB
-
MD5
29a07dffd997d6f733a759462803f1ff
-
SHA1
f4bf3e0d64fec97e08b2b7ca0e1a160b243dcfee
-
SHA256
ee0adfa6f30757d7fcc0c95b9c950cde6e020d4c62b0fae3f72d183c1e00f0cf
-
SHA512
8c862d4a16ad87cd99c07a1deb00d9bb39e72db9b2cb9adff8edb54170397fb81da51c06a7d227e29ceb92d73afa5d2c1193626f58da1994d50f1dd0620a9185
-
SSDEEP
3072:niWBcpyhsHIcfhGySWpYwd0mjbpAvohjIgjKJ:ni+soDySWpUcp6u2
Malware Config
Signatures
Files
-
ee0adfa6f30757d7fcc0c95b9c950cde6e020d4c62b0fae3f72d183c1e00f0cf.exe windows x86
68739bf3099b04e7d027b66b1c8ab57a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetLastError
GetStartupInfoA
user32
MessageBoxA
msvcrt
_adjust_fdiv
??2@YAPAXI@Z
strncpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE