Static task
static1
Behavioral task
behavioral1
Sample
ea9a2225033744adebe087b9f1e0fa08a08c299864e75bf63a08b32c6d4ac041.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea9a2225033744adebe087b9f1e0fa08a08c299864e75bf63a08b32c6d4ac041.exe
Resource
win10v2004-20220812-en
General
-
Target
ea9a2225033744adebe087b9f1e0fa08a08c299864e75bf63a08b32c6d4ac041
-
Size
266KB
-
MD5
ad9fa692d7d5498bea59718a1889e3c3
-
SHA1
4a3c1f631571d27d42b37c4ac55b7abe96aa4a3e
-
SHA256
ea9a2225033744adebe087b9f1e0fa08a08c299864e75bf63a08b32c6d4ac041
-
SHA512
950822a62facc21629b132b1d2612caa173ed4aada13620bbfdfb513ba4cd310561b837265ee44034a27fb8566042eb224b6c87ea0785b9782ae148fadf6c6cf
-
SSDEEP
6144:0oyH5/RMz7tgYauP+lkqAoR/f5bdzzHsXeaqcDEXrPeaMRW:0oyZ/RMz5gMWkcN5S0cDYTea8W
Malware Config
Signatures
Files
-
ea9a2225033744adebe087b9f1e0fa08a08c299864e75bf63a08b32c6d4ac041.exe windows x86
4ba8ea8414cdde688c9ee876f1bf8b4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetDriveTypeW
ReadFile
SetLastError
FindClose
CreateEventW
GlobalFlags
HeapCreate
GetCurrentThreadId
EnumCalendarInfoA
EnterCriticalSection
TlsGetValue
lstrlenW
FindAtomW
GetPrivateProfileStringA
GetConsoleAliasA
GetNumberFormatW
ResumeThread
LocalFree
GetCurrentProcessId
user32
GetMenuInfo
GetClientRect
DispatchMessageA
GetCursorInfo
IsWindow
DrawTextA
GetSysColor
GetKeyboardType
DispatchMessageA
GetKeyState
GetClassInfoA
CallWindowProcW
SetFocus
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
dsprop
CheckADsError
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ