Static task
static1
Behavioral task
behavioral1
Sample
0ebaa858be4b7a0cd37ac9d3d8b7ac2c367a0df4a9b08c6763c7146818a8787d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ebaa858be4b7a0cd37ac9d3d8b7ac2c367a0df4a9b08c6763c7146818a8787d.exe
Resource
win10v2004-20221111-en
General
-
Target
0ebaa858be4b7a0cd37ac9d3d8b7ac2c367a0df4a9b08c6763c7146818a8787d
-
Size
19KB
-
MD5
5d7c54f0afc77823106d42436107e63b
-
SHA1
c8a59f4d24a3e0c2e0473f38a4b91e6e911e2c65
-
SHA256
0ebaa858be4b7a0cd37ac9d3d8b7ac2c367a0df4a9b08c6763c7146818a8787d
-
SHA512
17aabc195057605bc00c8190749cde79bd20d09ac448a4b07f96f4cf9c52d3998554ff81ef58617e6f4f11f44e3871c97e9907289bffd1c68c82bdafe083164f
-
SSDEEP
384:dxqka6IRVZSXIy1UEabllmhzNToabL6PafD:dojZoIyiVmtNkq2PU
Malware Config
Signatures
Files
-
0ebaa858be4b7a0cd37ac9d3d8b7ac2c367a0df4a9b08c6763c7146818a8787d.exe windows x86
c7e0c1b0d5d180a6ba25d63e4882a3c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
callgate
_CreateCallGate@12
_FreeCallGate@4
kernel32
SetHandleCount
GetOEMCP
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
HeapFree
GetFileType
GetStdHandle
GetStartupInfoA
HeapCreate
WriteFile
HeapAlloc
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ