Static task
static1
Behavioral task
behavioral1
Sample
eb7a9e644b9842f33a2ff2016e83667d88a4ae0a550bf60f4ddb4804979d79bf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb7a9e644b9842f33a2ff2016e83667d88a4ae0a550bf60f4ddb4804979d79bf.exe
Resource
win10v2004-20221111-en
General
-
Target
eb7a9e644b9842f33a2ff2016e83667d88a4ae0a550bf60f4ddb4804979d79bf
-
Size
533KB
-
MD5
f0fde20defd78342b3e884086f8e5ea0
-
SHA1
6e9b85679ea2bf1b6e6ba36f4140e43008fe2137
-
SHA256
eb7a9e644b9842f33a2ff2016e83667d88a4ae0a550bf60f4ddb4804979d79bf
-
SHA512
72b4c358eb9983351f5e6238f9eec4960fdd95a48698c505cab4d127aeefc39f7bc767096e03c0916a94cfa03c3396b8fee206e7ad61bcba4d3a5a56363131f3
-
SSDEEP
12288:bCOROim7XxBe/uL67v7L+mlG6RthRme4uB4L0Ea7qT91p4O8xGbaNt2P6W:bCOROXve2KzDMqtv4byOGbIX
Malware Config
Signatures
Files
-
eb7a9e644b9842f33a2ff2016e83667d88a4ae0a550bf60f4ddb4804979d79bf.exe windows x86
792b97452f9c4c2b2c372d9080890005
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePen
DeleteObject
LineTo
MoveToEx
SelectObject
CreatePatternBrush
user32
ReleaseDC
GetSysColor
GetDC
GetClientRect
SystemParametersInfoA
SetWindowLongA
SendMessageA
LoadIconA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
CallWindowProcA
kernel32
FindNextFileA
FindFirstFileA
FindClose
Sleep
SetWaitableTimer
SetCurrentDirectoryA
MultiByteToWideChar
LoadLibraryW
IsWow64Process
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
AddAtomA
CreateThread
CreateWaitableTimerA
ExitProcess
GetModuleHandleA
GetSystemTimeAsFileTime
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 525KB - Virtual size: 525KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ