Static task
static1
Behavioral task
behavioral1
Sample
beea7ca813638107b472c6d7b6fb068dca14106092dab11b7ecb39da84d1cc3e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
beea7ca813638107b472c6d7b6fb068dca14106092dab11b7ecb39da84d1cc3e.exe
Resource
win10v2004-20220901-en
General
-
Target
beea7ca813638107b472c6d7b6fb068dca14106092dab11b7ecb39da84d1cc3e
-
Size
365KB
-
MD5
e75c21e53904b533b83c5f57dd27bf3c
-
SHA1
2e9013b45438132013ca404461563498265872f7
-
SHA256
beea7ca813638107b472c6d7b6fb068dca14106092dab11b7ecb39da84d1cc3e
-
SHA512
b65f44bba295bc1da6c4b249788fdf687009af1af466a2be0b6679836510d8c303c15d5f956009fa3e24c3175f4e79dd12247e727aea28991524d8208e00cc69
-
SSDEEP
6144:4dKNWOXPOumOhnHDAiUNfNAxOZ/kxjXrpRaPz6PcSTGtNFEQuZxJC:4shhxDrUYxOZ/kxj7pRizAcCGPFEQAI
Malware Config
Signatures
Files
-
beea7ca813638107b472c6d7b6fb068dca14106092dab11b7ecb39da84d1cc3e.exe windows x86
ce587d510e8f9b71d63bd160800ba94c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
TlsGetValue
CreateMutexA
GetModuleHandleA
GetDriveTypeA
GetExitCodeProcess
EnumResourceTypesA
Sleep
CloseHandle
SetLastError
GetLastError
GetDiskFreeSpaceExW
GetComputerNameA
DeleteCriticalSection
GetCommandLineA
ReleaseMutex
FreeConsole
VirtualProtect
GetTickCount
LoadLibraryExA
shell32
SheChangeDirA
SHGetDiskFreeSpaceA
ShellMessageBoxA
DragFinish
DragQueryFileA
DragAcceptFiles
DllUnregisterServer
SHGetSettings
SHGetMalloc
StrChrA
SHFree
ShellAboutA
SHGetNewLinkInfo
msports
PortsClassInstaller
ComDBClose
ComDBOpen
ComDBClaimPort
ComDBReleasePort
user32
MessageBoxA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ