Static task
static1
Behavioral task
behavioral1
Sample
ec07948464a9bc9e2f8d8c79a0f831d4c6cb0ecdffa291c1d06123ea76f16709.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec07948464a9bc9e2f8d8c79a0f831d4c6cb0ecdffa291c1d06123ea76f16709.exe
Resource
win10v2004-20220812-en
General
-
Target
ec07948464a9bc9e2f8d8c79a0f831d4c6cb0ecdffa291c1d06123ea76f16709
-
Size
321KB
-
MD5
2e381be8ee5bf32b2476af78dc6692b4
-
SHA1
6dda93d943cb2c5ba966efb8593b312da98c375a
-
SHA256
ec07948464a9bc9e2f8d8c79a0f831d4c6cb0ecdffa291c1d06123ea76f16709
-
SHA512
b1fe727e92c10f940ae153b52eb039070f147251591091b9829b924bb674530ffed35fa838226134bc51aa01f9a637a499c21a1662fa1dd9d93f8c56aa7e2c17
-
SSDEEP
6144:ZKsVOJQWm3zS8JKXHBNiFgnEJJJrDDwfv4QCMHIy7Be2x0F76AodXyt0IzNMj:oKnzwniW4JfYFoWPY55A
Malware Config
Signatures
Files
-
ec07948464a9bc9e2f8d8c79a0f831d4c6cb0ecdffa291c1d06123ea76f16709.exe windows x86
27e3a14ad6494f2b33fa6f20ffbcccd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateCompatibleBitmap
SetBkMode
CreateSolidBrush
SelectObject
CreateCompatibleDC
SetTextColor
GetStockObject
DeleteDC
GetDeviceCaps
DeleteObject
BitBlt
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
kernel32
GetCommandLineA
GetStdHandle
GetConsoleOutputCP
GetFileAttributesA
CompareStringA
GetOEMCP
VirtualAlloc
Sleep
UnmapViewOfFile
SizeofResource
GetCurrentThreadId
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
HeapSize
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateFileW
GetProcAddress
FindFirstFileW
ResetEvent
FindFirstFileA
CompareStringW
GetProcessHeap
WaitForMultipleObjects
DeleteFileA
GetFileSize
GetStartupInfoA
FreeLibrary
GetModuleHandleW
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
GetConsoleMode
VirtualQuery
GetVersion
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
LoadLibraryA
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetExitCodeProcess
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
GetCPInfo
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
user32
SetWindowPos
SetCursor
GetClientRect
SendMessageA
InvalidateRect
IsWindowVisible
GetSysColor
MessageBoxA
SetDlgItemTextA
FillRect
ReleaseDC
GetDesktopWindow
TrackPopupMenu
LoadIconA
LoadCursorA
GetDlgItem
SetWindowTextA
EndDialog
SetWindowLongA
PostMessageA
GetSystemMetrics
DefWindowProcA
SetFocus
SetTimer
GetWindowLongA
GetWindow
TranslateMessage
EnableWindow
SetCapture
GetParent
GetMessageA
DestroyWindow
GetCursorPos
EndPaint
DispatchMessageA
msvcrt
_exit
_controlfp
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ