Static task
static1
Behavioral task
behavioral1
Sample
ea31aac72cda22935b05f20d675bdc6f2d813c55d3ce23b7aeaa9fcdea5f45b4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea31aac72cda22935b05f20d675bdc6f2d813c55d3ce23b7aeaa9fcdea5f45b4.exe
Resource
win10v2004-20221111-en
General
-
Target
ea31aac72cda22935b05f20d675bdc6f2d813c55d3ce23b7aeaa9fcdea5f45b4
-
Size
106KB
-
MD5
bb6ffddc709f4c346bc64421ebb650bf
-
SHA1
41be6a783ce75957681e0fa58d52077b0e816003
-
SHA256
ea31aac72cda22935b05f20d675bdc6f2d813c55d3ce23b7aeaa9fcdea5f45b4
-
SHA512
0b9b5bb1a4f7ed0aec53af2cb21a4ceac1898c0d4142f7414f8aa28b8ad4664ac5d06a6887d17bcab9a56013a6a37b81c0afabc15183f9fb22545b109eaf6824
-
SSDEEP
1536:9p00LKCH+IzBr7D8MdEkpyCqARqQctpWtIy6rAHN7BWG8ltB2Ah30K:w0OCRzBB7rqQc3WttMAHN7BRytBHh
Malware Config
Signatures
Files
-
ea31aac72cda22935b05f20d675bdc6f2d813c55d3ce23b7aeaa9fcdea5f45b4.exe windows x86
59223cb45c3935619488f4a42d8b80de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
duser
AddGadgetMessageHandler
AttachWndProcA
AttachWndProcW
AutoTrace
DUserCastDirect
BuildAnimation
BuildDropTarget
BuildInterpolation
CreateAction
kernel32
GetLastError
_lopen
GetEnvironmentVariableA
GetACP
CreateDirectoryA
IsBadCodePtr
GetTempPathW
InterlockedDecrement
_lwrite
FreeLibrary
ReadFile
mapi32
BMAPIAddress
BMAPIDetails
BMAPIFindNext
BMAPIGetAddress
mpr
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
Sections
.text Size: 21KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_MEM_READ