Static task
static1
Behavioral task
behavioral1
Sample
ea8adde00367ef2575be1be6c31ea808e6a4ba5687d6a9b549b790c69d833ced.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea8adde00367ef2575be1be6c31ea808e6a4ba5687d6a9b549b790c69d833ced.exe
Resource
win10v2004-20221111-en
General
-
Target
ea8adde00367ef2575be1be6c31ea808e6a4ba5687d6a9b549b790c69d833ced
-
Size
3.1MB
-
MD5
a6c8168a35898fabcbf57f25e33ffcce
-
SHA1
f0edef69d55c8dd794137de17c0bbbe823058e2c
-
SHA256
ea8adde00367ef2575be1be6c31ea808e6a4ba5687d6a9b549b790c69d833ced
-
SHA512
ebdab8592bf746701c4da0f220928ea96190e4cb697e379f77523d141df2e3cb707a1597f713ff93eece5659cd6c573536f640bd4172099b40bf451def46c225
-
SSDEEP
49152:5SHAdVNeTyEJcb64CugWaRc5tdle39TtqgbAARVMk0vajBsevFDhU:UgdVN4cb6NugW8Atdle3bjVMk0SVsY
Malware Config
Signatures
Files
-
ea8adde00367ef2575be1be6c31ea808e6a4ba5687d6a9b549b790c69d833ced.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
__wibu00 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
__wibu01 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
__wibu02 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 2.7MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE