Static task
static1
Behavioral task
behavioral1
Sample
eb4d3f163f073fefccfa7ebd51a57c7f7437da02db060df1b11608c467ee82c7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb4d3f163f073fefccfa7ebd51a57c7f7437da02db060df1b11608c467ee82c7.exe
Resource
win10v2004-20221111-en
General
-
Target
eb4d3f163f073fefccfa7ebd51a57c7f7437da02db060df1b11608c467ee82c7
-
Size
196KB
-
MD5
d3ef12268753473d19e1586bedd47cfd
-
SHA1
09386d4bc6143c0e881b044aa266accf65fa586d
-
SHA256
eb4d3f163f073fefccfa7ebd51a57c7f7437da02db060df1b11608c467ee82c7
-
SHA512
04e90f965c57c311f1750efc9f311b28e1d8d51cc64d6688d88496c26b5c82b6a4c7e00cb11282247c93ed36429102e888bf479e4979780a1b9d3dfc10fbc714
-
SSDEEP
6144:7HtkMAQ7f/8OgI9GoMpUxvGnd0Bxvgy9rDa9G5:7NkZQrkOx9GXpxd0DV9S9G5
Malware Config
Signatures
Files
-
eb4d3f163f073fefccfa7ebd51a57c7f7437da02db060df1b11608c467ee82c7.exe windows x86
b629336d7aca37b63b491931126013cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
GetCurrentProcess
ExitProcess
LCMapStringA
user32
CloseWindow
wsprintfA
CreateWindowExA
SetWindowLongA
CharLowerBuffA
advapi32
RegCloseKey
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegQueryValueA
Sections
.text Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ