Static task
static1
Behavioral task
behavioral1
Sample
eac810e3753e4908f3e48e6ec7d763533e05c1ba455c750196e69dc69ea5b99f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eac810e3753e4908f3e48e6ec7d763533e05c1ba455c750196e69dc69ea5b99f.exe
Resource
win10v2004-20221111-en
General
-
Target
eac810e3753e4908f3e48e6ec7d763533e05c1ba455c750196e69dc69ea5b99f
-
Size
86KB
-
MD5
2aa347c99e12e2ad967cb40d1e46caa7
-
SHA1
24538f69a1818d29a519c1ae57b574401a74b051
-
SHA256
eac810e3753e4908f3e48e6ec7d763533e05c1ba455c750196e69dc69ea5b99f
-
SHA512
009d3f1fea2d9e10361baffee603ac41915d19a0e0d1b4880d37a64426b5ea89f04adc8892984ad3adc9e1c7d2713b356a61d809bdaa5f1856958e7fd5aa44a0
-
SSDEEP
1536:pyi1GGQRn0qE9/EySej09mXhyRcvaiNMm28Rz4/ymPFrMUpdrhOVnom7fqBZoj:py+Wlnm1Pzep6jj
Malware Config
Signatures
Files
-
eac810e3753e4908f3e48e6ec7d763533e05c1ba455c750196e69dc69ea5b99f.exe windows x86
c45ab930d3ddf8924541d68be3ed005e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SuspendThread
DeleteFileA
WinExec
ResumeThread
MoveFileExA
CreateThread
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
LeaveCriticalSection
EnterCriticalSection
WriteFile
DeleteCriticalSection
ReadFile
GetFileSize
CreateFileA
GetVolumeInformationA
GetProcAddress
FreeLibrary
LoadLibraryA
ReleaseMutex
WaitForSingleObject
WaitNamedPipeA
GetLastError
CreateMutexA
GetStartupInfoA
GetModuleHandleA
InitializeCriticalSection
GetTempPathA
GetSystemDirectoryA
CloseHandle
GetPrivateProfileStringA
user32
CharLowerA
SystemParametersInfoA
CharUpperA
ShowWindow
SendMessageA
SetCursorPos
ClientToScreen
FindWindowExA
RegisterWindowMessageA
SendMessageTimeoutA
FindWindowA
GetWindowThreadProcessId
mouse_event
SetForegroundWindow
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
SysAllocStringLen
SysStringLen
SysFreeString
VariantClear
msvcrt
__CxxFrameHandler
_stricmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncmp
strstr
srand
rand
sprintf
atoi
malloc
free
localtime
time
_strlwr
wcscmp
strncpy
netapi32
Netbios
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE