Static task
static1
Behavioral task
behavioral1
Sample
ea08bf3bf22b7770aad3a7108af623248cc2b553e9b52d7a1dfd678a9bc48391.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ea08bf3bf22b7770aad3a7108af623248cc2b553e9b52d7a1dfd678a9bc48391.exe
Resource
win10v2004-20220901-en
General
-
Target
ea08bf3bf22b7770aad3a7108af623248cc2b553e9b52d7a1dfd678a9bc48391
-
Size
299KB
-
MD5
346c3c74bffcef63670e9a3221066370
-
SHA1
e3b647b7f810d3380ff260f6a34d0d2176408d18
-
SHA256
ea08bf3bf22b7770aad3a7108af623248cc2b553e9b52d7a1dfd678a9bc48391
-
SHA512
45137bf7f1caffb6c3cf01e809556a441799d7f8c17dcd70a39f94c9bf5174c0f29d7e2bf5cf1ecd29ebac826fbb650eda7bb8962ed1d2703e359e6fc242d3b9
-
SSDEEP
6144:E/BuzrDXP3PHBfP3HLp3PHcNRk5LBSwryCm9l0XtrxcJiFK5e2P0aEa:E5uzrD/3PHBfP3HLp3PHcziBeNWZs+Kk
Malware Config
Signatures
Files
-
ea08bf3bf22b7770aad3a7108af623248cc2b553e9b52d7a1dfd678a9bc48391.exe windows x86
622a8d03d3c582b2f83648b88775bd71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Heap32First
LoadLibraryA
CloseHandle
FindResourceA
lstrcpyW
GetDiskFreeSpaceA
InterlockedDecrement
Heap32Next
GetModuleHandleA
GetPrivateProfileIntA
GetDiskFreeSpaceA
SetEnvironmentVariableA
GetStringTypeW
ReadFileEx
ReadConsoleA
SetConsoleTitleW
HeapCreate
lstrcatW
GetLastError
CreateEventW
DeviceIoControl
adsldpc
ADsDeleteDSObject
ADsEnumClasses
ADsCreateDSObject
ADsCloseSearchHandle
shell32
SHGetDiskFreeSpaceA
DragFinish
SHGetMalloc
DllUnregisterServer
DragAcceptFiles
SHFree
DuplicateIcon
SHGetSettings
DragQueryFileA
ExtractIconA
ShellAboutA
StrChrA
ShellMessageBoxW
uxtheme
SetWindowTheme
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ