Static task
static1
Behavioral task
behavioral1
Sample
eb1bf896ec9ebb66f59136267d98710f1f27b1cbfbc1330ee60af99cf3cbecdb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb1bf896ec9ebb66f59136267d98710f1f27b1cbfbc1330ee60af99cf3cbecdb.exe
Resource
win10v2004-20220812-en
General
-
Target
eb1bf896ec9ebb66f59136267d98710f1f27b1cbfbc1330ee60af99cf3cbecdb
-
Size
207KB
-
MD5
6599bdf1a87a1401c3a0073454a7d10f
-
SHA1
29466e14928bc9480ee6f228e4bc8b2a9cb0d309
-
SHA256
eb1bf896ec9ebb66f59136267d98710f1f27b1cbfbc1330ee60af99cf3cbecdb
-
SHA512
b97872448c9332afbf950cc4dbcc3eda18b26da1f6fe2eb3ffcff62d85c9ea58a125ba59db8754a4b302ea25dfd0fcb67c59523aa7fe0a2810237e9325c2880e
-
SSDEEP
3072:ed3DnHZdhixK1i6Uqlo62Gqryzt6KUkcJSwVQQG/rx5obSrnLqvcs:yb896roNfryMdJtQJnrrL6
Malware Config
Signatures
Files
-
eb1bf896ec9ebb66f59136267d98710f1f27b1cbfbc1330ee60af99cf3cbecdb.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 187KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE