Static task
static1
Behavioral task
behavioral1
Sample
ec284a9cc4a4128e5f0efde30e9ee5ab961c1c39d8f5c029a017bff523f38743.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ec284a9cc4a4128e5f0efde30e9ee5ab961c1c39d8f5c029a017bff523f38743.exe
Resource
win10v2004-20220812-en
General
-
Target
ec284a9cc4a4128e5f0efde30e9ee5ab961c1c39d8f5c029a017bff523f38743
-
Size
832KB
-
MD5
64bae0dff99f6fb15b18f03aa32dadd0
-
SHA1
9ae19c48dd626664a8ee27686470f5a200494b03
-
SHA256
ec284a9cc4a4128e5f0efde30e9ee5ab961c1c39d8f5c029a017bff523f38743
-
SHA512
2c4ee2b4d8108d4593e064733b2711df04de1b796926386748bbe1a094357f5b248c0c95e8d7c29f776ebe3938c9e7bca550f2a524dbfd4a1d281ebb6b815912
-
SSDEEP
24576:uEPyyO5/jTjeMH4Lr4wwxZsPOkWTl8UMR0K:PxOJD1PM
Malware Config
Signatures
Files
-
ec284a9cc4a4128e5f0efde30e9ee5ab961c1c39d8f5c029a017bff523f38743.exe windows x86
28cd82a74e922a16544e2a4239577cc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
CopyFileA
ReadConsoleA
GetEnvironmentStringsW
GetDiskFreeSpaceW
GetFullPathNameW
SearchPathW
GetModuleHandleA
GetBinaryTypeW
GetProcessVersion
WriteConsoleA
CreateDirectoryA
GetDriveTypeA
HeapCreate
MoveFileExW
FreeEnvironmentStringsA
CompareStringA
msdart
mpMalloc
??0CEXAutoBackupFile@@QAE@PBG@Z
mpFree
MpHeapSize
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 813KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ