Static task
static1
Behavioral task
behavioral1
Sample
d3931b8ac7e251bf8d195f4f4b2b748ccbec5887542c2d125ba5041dc81179f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3931b8ac7e251bf8d195f4f4b2b748ccbec5887542c2d125ba5041dc81179f4.exe
Resource
win10v2004-20221111-en
General
-
Target
d3931b8ac7e251bf8d195f4f4b2b748ccbec5887542c2d125ba5041dc81179f4
-
Size
769KB
-
MD5
300768bab80f8b5ddee97fdb0399cde7
-
SHA1
484c231ba1ff466c3c5207b96509e156a871674d
-
SHA256
d3931b8ac7e251bf8d195f4f4b2b748ccbec5887542c2d125ba5041dc81179f4
-
SHA512
fc2b48677f51e4c0035c6064ffdee57cc5ac7c03b2d82ba6bfafa46f94fc26f81044fd08e5cdbe84552326ef0a5c8ed67fb9062201d7f264e4167b2fcdb60f8b
-
SSDEEP
12288:5Gkh8GFzA66ziOjSc5LnnuRdlfi/8sCi2RNyY+Ufw/bqN1YLp3T1DltZl81Ts:532GdAjO3jiksCDTNBwmNK5XZG
Malware Config
Signatures
Files
-
d3931b8ac7e251bf8d195f4f4b2b748ccbec5887542c2d125ba5041dc81179f4.exe windows x86
d62b3e3f1a67cf68b8fbb75a96a2eb9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
CreateFileA
CreateFileMappingW
HeapFree
GetModuleHandleA
WriteFile
GetTickCount
VirtualProtectEx
CreateMutexA
GetCommandLineA
WriteConsoleW
GetDriveTypeA
OpenEventW
RemoveDirectoryA
ResetEvent
ReleaseSemaphore
RemoveDirectoryA
CreateDirectoryW
DeleteFileA
GetFileType
ReleaseMutex
lstrlenA
Beep
FindClose
FindClose
user32
IsWindow
DispatchMessageA
GetClassInfoA
PeekMessageA
IsZoomed
DestroyMenu
GetWindowLongA
CreateIcon
GetSysColor
DestroyMenu
MessageBoxA
FindWindowA
DrawTextW
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ