Static task
static1
Behavioral task
behavioral1
Sample
8ecc239a573466255f79396287ce8a53565e7ad12ec53b12c81005188c646577.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ecc239a573466255f79396287ce8a53565e7ad12ec53b12c81005188c646577.exe
Resource
win10v2004-20220812-en
General
-
Target
8ecc239a573466255f79396287ce8a53565e7ad12ec53b12c81005188c646577
-
Size
442KB
-
MD5
391774e6fe813f38e4b8269a1c584648
-
SHA1
5d1aac97ba1c7dc847f143a0b321a5d3b69acc28
-
SHA256
8ecc239a573466255f79396287ce8a53565e7ad12ec53b12c81005188c646577
-
SHA512
455cb67f833826075f071cfd7334390f000779e8c5999d5130919c61c6b67fa74f41544fb2537fa3b690c8eaa7463f62e3f093e3dad39b3d5bf76ae6062ef11d
-
SSDEEP
6144:bWPeWggWi5RpDkLyV3+tzjwchTBIzp7VFbswtNptxxUy3VPO3a0HLbTGCDajW0yB:CmWpDxV3L8S737XfNP0H/ia0y
Malware Config
Signatures
Files
-
8ecc239a573466255f79396287ce8a53565e7ad12ec53b12c81005188c646577.exe windows x86
15428908129f40a8d765f0e0c08dd7c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetCurrentThread
MapUserPhysicalPagesScatter
VirtualProtectEx
ExitProcess
ntdll
NtReadFile
user32
DestroyCaret
GetActiveWindow
GetWindowRgn
Sections
.ntext Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.1buj74 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bjabhq Size: 411KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ