Static task
static1
Behavioral task
behavioral1
Sample
0ee402d4c90a4d41b61392208c2e4dac4f75c9999bf2f68d504978407d15cd17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ee402d4c90a4d41b61392208c2e4dac4f75c9999bf2f68d504978407d15cd17.exe
Resource
win10v2004-20220812-en
General
-
Target
0ee402d4c90a4d41b61392208c2e4dac4f75c9999bf2f68d504978407d15cd17
-
Size
208KB
-
MD5
42644381d223d2f7292fd2637d7c3800
-
SHA1
ff91638f944ad3fafae04d33c503827de519369c
-
SHA256
0ee402d4c90a4d41b61392208c2e4dac4f75c9999bf2f68d504978407d15cd17
-
SHA512
ed78e951dd96329e5e242a92309dabdd382641cb49f9309c5902d4e2c6bc6af3b60cde6d2d5d2685beb49d088f2c74bf955f24c7c9a072019d02382d8397df59
-
SSDEEP
6144:wczIyhH/NrZbZia5B0qsyiWXxYWJIDSi:LHlrJwkBFLxYWZi
Malware Config
Signatures
Files
-
0ee402d4c90a4d41b61392208c2e4dac4f75c9999bf2f68d504978407d15cd17.exe windows x86
cd0b29dabdb2fa1e5851e1e7a7fda9ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetOEMCP
HeapAlloc
SetLastError
lstrcpyA
GetCurrentProcess
GetTickCount
lstrlenA
QueryPerformanceCounter
LockResource
LoadLibraryW
GetCurrentProcessId
WideCharToMultiByte
lstrcmpA
CreateFileA
GetProcessHeap
HeapFree
MultiByteToWideChar
IsValidLocale
GetVolumeInformationA
SetUnhandledExceptionFilter
GetLocalTime
GetLocaleInfoA
FindResourceA
SystemTimeToFileTime
GetSystemTimeAsFileTime
schannel
QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
QueryContextAttributesA
scecli
SceAddToObjectList
SceAppendSecurityProfileInfo
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem
SceAddToNameStatusList
advapi32
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ