Static task
static1
Behavioral task
behavioral1
Sample
eb48e809e8f1bffcede0939eb99aaa4cd30b385f83b7da18350f7230b5a31a5c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb48e809e8f1bffcede0939eb99aaa4cd30b385f83b7da18350f7230b5a31a5c.exe
Resource
win10v2004-20220812-en
General
-
Target
eb48e809e8f1bffcede0939eb99aaa4cd30b385f83b7da18350f7230b5a31a5c
-
Size
252KB
-
MD5
7466c8074f81102a56683d4fc6f1b68a
-
SHA1
54a6589b1c6f3210c8a4001b7fe1e7161ecc7e35
-
SHA256
eb48e809e8f1bffcede0939eb99aaa4cd30b385f83b7da18350f7230b5a31a5c
-
SHA512
fc100afd22d53833a2e63e02ef5b6d21d70a3dbcd5c99ab0bde221531739b97643b73db5595754da8bba4eb6fa5a2aa8dfe3c0fd79aceb30b2aaabb44e105910
-
SSDEEP
6144:iQSZ7tqbY8jNQgtnNzHlXOuHZKINKnj6SCN:inBCY8VnNjt7K9njC
Malware Config
Signatures
Files
-
eb48e809e8f1bffcede0939eb99aaa4cd30b385f83b7da18350f7230b5a31a5c.exe windows x86
a5e94ced6f8a76567b5bad335610460f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
SHGetFolderPathA
shlwapi
PathFindExtensionA
PathFindFileNameA
PathIsDirectoryA
PathGetArgsA
PathAppendA
PathFileExistsA
SHGetValueA
PathStripToRootA
PathIsUNCA
iphlpapi
GetAdaptersInfo
kernel32
InterlockedDecrement
GetCurrentThreadId
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetFileTime
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetModuleHandleA
GetCurrentDirectoryA
HeapAlloc
HeapFree
RaiseException
HeapReAlloc
VirtualAlloc
RtlUnwind
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
SetStdHandle
SetHandleCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
GetDriveTypeA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameA
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalGetAtomNameA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetVolumeInformationA
lstrcmpA
lstrcpyA
GetFileAttributesA
GetVersionExA
GetCurrentProcess
SetPriorityClass
GetModuleFileNameA
GetShortPathNameA
CreateFileA
DeviceIoControl
WaitForSingleObject
FreeLibrary
OutputDebugStringA
OpenProcess
TerminateProcess
DeleteFileA
RemoveDirectoryA
Sleep
SetLastError
CreateMutexA
GetSystemTimeAsFileTime
SystemTimeToFileTime
LoadLibraryA
GetProcAddress
ExitProcess
GetTempPathA
CopyFileA
SetCurrentDirectoryA
CloseHandle
GetComputerNameA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
user32
DestroyMenu
PostQuitMessage
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
SetWindowTextA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
CharUpperA
EnumWindows
SendMessageTimeoutA
EnableMenuItem
CheckMenuItem
UnregisterClassA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetWindowsHookExA
CallNextHookEx
PostMessageA
FindWindowExA
GetWindowTextA
GetWindow
GetDesktopWindow
FindWindowA
MessageBoxA
RegisterWindowMessageA
GetWindowThreadProcessId
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSystemMetrics
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
IsIconic
gdi32
SetMapMode
DeleteDC
GetStockObject
RestoreDC
SaveDC
DeleteObject
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
StringFromIID
CoGetMalloc
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ