Static task
static1
Behavioral task
behavioral1
Sample
ec52c247d743e0122bd6b788e227e9ac92754d4aa4cb56345538cfcc61392f46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec52c247d743e0122bd6b788e227e9ac92754d4aa4cb56345538cfcc61392f46.exe
Resource
win10v2004-20220812-en
General
-
Target
ec52c247d743e0122bd6b788e227e9ac92754d4aa4cb56345538cfcc61392f46
-
Size
259KB
-
MD5
d5e6dd69571c17053c8f707ac0a3595d
-
SHA1
e28ec22fbf65beb08e4f7e91c18820dc39718b30
-
SHA256
ec52c247d743e0122bd6b788e227e9ac92754d4aa4cb56345538cfcc61392f46
-
SHA512
fba8d2ca8307be9c4e477bfafd6b43a3ca85ef387bec07abd809704fb6b0a755a6844a9e4812a00568851f60f884dee05d53cbb116318bf455917fcd9cd0a1b4
-
SSDEEP
6144:tenKdP5CWrJxycnCLxGhncGSV6AXUgltckGtb:CKdxCWraZdCncJXt
Malware Config
Signatures
Files
-
ec52c247d743e0122bd6b788e227e9ac92754d4aa4cb56345538cfcc61392f46.exe windows x86
67ec31e7ab3890ec3fe3c5f5e70dd951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomW
GetFileType
ReadConsoleInputA
WritePrivateProfileStringA
GetCPInfo
GetUserDefaultLCID
HeapAlloc
TlsFree
LeaveCriticalSection
HeapSize
SetEnvironmentVariableA
HeapValidate
GetDateFormatW
FillConsoleOutputAttribute
WriteFile
LCMapStringW
VirtualFree
GetDateFormatA
GetEnvironmentStrings
SetUnhandledExceptionFilter
IsValidCodePage
CompareStringW
GetEnvironmentStringsW
DeleteCriticalSection
CreateMutexW
GetOEMCP
SetConsoleCtrlHandler
GetCurrentThread
GetProcAddress
EnumTimeFormatsW
GetCommandLineA
Sleep
SetConsoleCursorPosition
CompareStringA
GlobalAddAtomA
GetProcessHeap
VirtualQuery
HeapDestroy
SetLastError
InterlockedDecrement
SetFileTime
GetStdHandle
MultiByteToWideChar
GetACP
HeapReAlloc
HeapCreate
ExitProcess
GetLastError
IsDebuggerPresent
VirtualAlloc
TlsAlloc
QueryPerformanceCounter
GetCurrentProcess
GetTimeFormatA
GetModuleHandleA
FreeEnvironmentStringsA
GetStringTypeA
GetStringTypeW
GetCurrentThreadId
InterlockedIncrement
TlsSetValue
LoadLibraryW
FreeEnvironmentStringsW
GetCurrentProcessId
WideCharToMultiByte
GetTimeZoneInformation
GetSystemDefaultLangID
ReleaseMutex
GetTickCount
GetLocaleInfoW
GetPrivateProfileSectionW
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSection
RtlUnwind
EnterCriticalSection
GetSystemTimeAsFileTime
InterlockedExchange
GetVersionExA
GetPrivateProfileIntW
WritePrivateProfileSectionA
FreeLibrary
UnhandledExceptionFilter
GetLocaleInfoA
GetStartupInfoA
HeapFree
TerminateProcess
LoadLibraryA
WriteConsoleA
SetHandleCount
TlsGetValue
WaitForSingleObject
GetModuleFileNameA
LCMapStringA
user32
SetFocus
LoadMenuIndirectA
UnpackDDElParam
ChangeClipboardChain
GetKeyboardState
IsChild
SetWindowContextHelpId
GetWindowInfo
ValidateRgn
IsMenu
CheckMenuItem
GetDoubleClickTime
ClipCursor
RegisterClassW
GetKeyboardLayoutNameW
shell32
DragAcceptFiles
SHGetFileInfo
DuplicateIcon
SHInvokePrinterCommandW
SHFileOperationA
DragFinish
SHFormatDrive
comdlg32
GetFileTitleA
GetOpenFileNameA
ChooseFontA
GetSaveFileNameA
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ