Static task
static1
Behavioral task
behavioral1
Sample
eb18afd779e6138bbaf532be3f270cf8050d4dec5058ee298796f3e49fd33866.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb18afd779e6138bbaf532be3f270cf8050d4dec5058ee298796f3e49fd33866.exe
Resource
win10v2004-20221111-en
General
-
Target
eb18afd779e6138bbaf532be3f270cf8050d4dec5058ee298796f3e49fd33866
-
Size
64KB
-
MD5
62bd5860e4ce3f5ea74f4e4d2e5e00a5
-
SHA1
3d9a98b2f68142f696e2c880eb83665942b9c7e8
-
SHA256
eb18afd779e6138bbaf532be3f270cf8050d4dec5058ee298796f3e49fd33866
-
SHA512
dbbe6c8a362981a8386f75f64fb93877ab584ea6d3b2b4fde6854851faff7bfcd49d2eacd4f449e2fd8e3f55d3872627af40d5d1e4c72f5c917157e9150b6501
-
SSDEEP
768:OOf8MyL560MYq/8OWF5azmbUGD21Zm3wrQOR72VbwEy0rrwnp5:ZNl00Y+mbJgZmArnR7OMElUr
Malware Config
Signatures
Files
-
eb18afd779e6138bbaf532be3f270cf8050d4dec5058ee298796f3e49fd33866.exe windows x86
5fc76202f9f69ab9f50ff7a782dd9c2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
AddAtomA
CloseHandle
CreateFileA
CreateMutexA
DeleteFileA
ExitProcess
FindAtomA
FindFirstFileA
FindNextFileA
GetAtomNameA
GetDriveTypeA
GetLastError
GetLocaleInfoA
GetSystemTime
GetWindowsDirectoryA
ReadFile
SetUnhandledExceptionFilter
Sleep
WriteFile
lstrlenA
msvcrt
_close
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_filbuf
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fgetc
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
malloc
memcpy
memset
rand
signal
srand
strcat
strcmp
strcpy
strlen
strncat
strncpy
system
time
user32
MessageBoxA
wsock32
WSAStartup
closesocket
connect
gethostbyname
htons
ntohl
ntohs
recv
select
send
socket
Sections
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE