Static task
static1
Behavioral task
behavioral1
Sample
ec2fc98b9f140fe0d69c9b6ba5e2ca7d540554ed23949b58748a46772605eda9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec2fc98b9f140fe0d69c9b6ba5e2ca7d540554ed23949b58748a46772605eda9.exe
Resource
win10v2004-20220812-en
General
-
Target
ec2fc98b9f140fe0d69c9b6ba5e2ca7d540554ed23949b58748a46772605eda9
-
Size
243KB
-
MD5
684c82374403367fce25257a037a98cf
-
SHA1
0a7092d0c10261d15d7f00fc482ae3e2dfe51c8e
-
SHA256
ec2fc98b9f140fe0d69c9b6ba5e2ca7d540554ed23949b58748a46772605eda9
-
SHA512
9f3df4e500efaf7af894d021f7f2533de2c1cb62aeac597864eea53bcfec1ce769c635314b1e3a5a5d83235dd7decf6d993dcce6751991b619328acd5f6f4ee1
-
SSDEEP
6144:XCrUca2gjrkCvtgLuhNy0qmGjzA5ars+6gjXnW:rfH1PWSYSkm
Malware Config
Signatures
Files
-
ec2fc98b9f140fe0d69c9b6ba5e2ca7d540554ed23949b58748a46772605eda9.exe windows x86
0e145b6d526cbbcf3c2b368f3e819eb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle
LCMapStringA
user32
wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
advapi32
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
Sections
.text Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ