Static task
static1
Behavioral task
behavioral1
Sample
electronic-workbench.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
electronic-workbench.exe
Resource
win10v2004-20220812-en
General
-
Target
electronic-workbench.EXE
-
Size
7.1MB
-
MD5
a4868c58f7d1d6523be38f460e4bb5d2
-
SHA1
eab650c2354352a14eb019b3433b55c466093721
-
SHA256
f4d5b11abf0fe71bf63366fe20c53aebd0ba5a45ccee6c63df10d38ef53b26f4
-
SHA512
65b17d6033263b75749a264c9938224452622581618c27b66bf3e562551397ce3064d99d2bbec3112d144676170bdefd6619c78654e9c3a93130d8b594c45097
-
SSDEEP
98304:xt3hFFQfMlWFylvoY3R44G7qoRMx/x/WIACbpC/+yiNBpOt9SwTlR9B:ZFFCMlWstG7vRq9NNUMwTlTB
Malware Config
Signatures
Files
-
electronic-workbench.EXE.exe windows x86
dee7b5f40b037e4608de07581f860d84
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
CreateProcessA
CloseHandle
WritePrivateProfileStringA
GetDiskFreeSpaceA
lstrlenA
SetCurrentDirectoryA
lstrcpyA
CreateDirectoryA
lstrcmpiA
_lread
_lwrite
_lclose
_lopen
_lcreat
_llseek
GetTempPathA
LoadLibraryA
HeapAlloc
GetModuleHandleA
GetStdHandle
GetFileType
WriteFile
GetOEMCP
GetACP
SetHandleCount
WideCharToMultiByte
GetEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
FreeEnvironmentStringsW
GetProcAddress
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
TerminateProcess
ExitProcess
HeapFree
HeapCreate
GetVersion
GetCurrentProcess
user32
RegisterClassA
MessageBoxA
PostQuitMessage
DefWindowProcA
RegisterClassExA
DrawTextA
BeginPaint
GetClientRect
DispatchMessageA
PostMessageA
TranslateMessage
GetWindowRect
GetMessageA
GetDesktopWindow
UpdateWindow
CreateWindowExA
ShowWindow
LoadCursorA
LoadStringA
LoadIconA
wsprintfA
EndPaint
gdi32
SetBkMode
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 783B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ