Static task
static1
Behavioral task
behavioral1
Sample
0ec080d6dedc2bb7956cdd49041ee78b9b22a48cc4e92a0dd256010c66b979ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0ec080d6dedc2bb7956cdd49041ee78b9b22a48cc4e92a0dd256010c66b979ff.exe
Resource
win10v2004-20220812-en
General
-
Target
0ec080d6dedc2bb7956cdd49041ee78b9b22a48cc4e92a0dd256010c66b979ff
-
Size
60KB
-
MD5
5d70e262655ce410cb03930544eb3c30
-
SHA1
d7afe76cba456f7b180ab50959003631f852ba55
-
SHA256
0ec080d6dedc2bb7956cdd49041ee78b9b22a48cc4e92a0dd256010c66b979ff
-
SHA512
e50f7953c0fcc0339b54378f76e585b298e03e2a57da122b232a25386988d8d4d8315b2b8da33f139d212ce14a6ed622744ef1a63d44926863032c940d84e633
-
SSDEEP
768:MYbxW4rDuo3UEnqR2qzsJL44iB9tDDLVHggJrv+92Io4QO1G:nM4dHnA2b4HDLlggpmfoI
Malware Config
Signatures
Files
-
0ec080d6dedc2bb7956cdd49041ee78b9b22a48cc4e92a0dd256010c66b979ff.exe windows x86
b145e476a20335c31298026844871824
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetLastError
FindNextFileA
MultiByteToWideChar
GetSystemDirectoryA
GetCommandLineA
DeleteFileA
CreateProcessA
WaitForSingleObject
CreateFileA
WriteFile
FindFirstFileA
CloseHandle
CompareStringW
CompareStringA
LoadLibraryA
GetOEMCP
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleA
SetFilePointer
GetStdHandle
HeapFree
HeapAlloc
WideCharToMultiByte
SetStdHandle
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind
FlushFileBuffers
GetCPInfo
SetEnvironmentVariableA
advapi32
RegSetValueExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
shell32
SHGetSpecialFolderPathA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE