Static task
static1
Behavioral task
behavioral1
Sample
ea987f90917945336b5750fb95c515aff2a4c4e007cae7f91ad4ac2057e9cd42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea987f90917945336b5750fb95c515aff2a4c4e007cae7f91ad4ac2057e9cd42.exe
Resource
win10v2004-20221111-en
General
-
Target
ea987f90917945336b5750fb95c515aff2a4c4e007cae7f91ad4ac2057e9cd42
-
Size
299KB
-
MD5
96ab6f2eaf17d42166581869f661b111
-
SHA1
6817ae0f2812401110a92b51109cf85b95976796
-
SHA256
ea987f90917945336b5750fb95c515aff2a4c4e007cae7f91ad4ac2057e9cd42
-
SHA512
8dd3aef21ebec3d623c87c2850310b397af89c1aed2aca7cfdf4bcdedd11c14779bd9a91a4765f2a9346e04c17a4a9009d4ff30c0fa69f50f41a18299ccc2d90
-
SSDEEP
6144:vZ/BuzrDXP3PHBfP3HLp3PHJ93r75HO5+UmOTJHz6Z1pJmETcMyzJjQcMVwWusdB:vZ5uzrD/3PHBfP3HLp3PHJ9Ru5+ceZ1H
Malware Config
Signatures
Files
-
ea987f90917945336b5750fb95c515aff2a4c4e007cae7f91ad4ac2057e9cd42.exe windows x86
69eefda21c2e22846fe95e104e6831a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetConsoleTitleW
GetDiskFreeSpaceA
Heap32First
GetDiskFreeSpaceA
CreateEventW
lstrcpyW
InterlockedDecrement
FindResourceA
ReadFileEx
CloseHandle
GetLastError
GetStringTypeW
GetModuleHandleA
HeapCreate
GetPrivateProfileIntA
ReadConsoleA
lstrcatW
Heap32Next
DeviceIoControl
SetEnvironmentVariableA
LoadLibraryA
adsldpc
ADsEnumClasses
ADsDeleteDSObject
ADsCloseSearchHandle
ADsCreateDSObject
shell32
ShellMessageBoxW
SHGetMalloc
SHGetSettings
StrChrA
SHGetDiskFreeSpaceA
DragQueryFileA
DragFinish
DllUnregisterServer
DragAcceptFiles
DuplicateIcon
ExtractIconA
ShellAboutA
SHFree
uxtheme
SetWindowTheme
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ