Static task
static1
Behavioral task
behavioral1
Sample
ec092e5db396b349595af89a9f43ecb95e3119011d293fbca571a5704d933c6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec092e5db396b349595af89a9f43ecb95e3119011d293fbca571a5704d933c6b.exe
Resource
win10v2004-20220901-en
General
-
Target
ec092e5db396b349595af89a9f43ecb95e3119011d293fbca571a5704d933c6b
-
Size
134KB
-
MD5
7cebf91de5f9901f53f1ce6a82901c50
-
SHA1
4376870f1855d75958692ad58f72004dd1856865
-
SHA256
ec092e5db396b349595af89a9f43ecb95e3119011d293fbca571a5704d933c6b
-
SHA512
718a48442065f121be6898a76ee9ef6b05d798187a32a978578b73818014d3110db132fc926ce4e4c51b8ca7b9f4adc6a6599fd501d251d57671630a9da5499d
-
SSDEEP
3072:U8rxWN/FS0Ss+2O81deGISXzWHKPY4IQ8TTM:yFtSs+2D1gGISX44yT
Malware Config
Signatures
Files
-
ec092e5db396b349595af89a9f43ecb95e3119011d293fbca571a5704d933c6b.exe windows x86
da111801d1ec25aa7ec446986dc5f12b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryW
GetCurrentThread
CreateEventW
SetLastError
SuspendThread
GetPrivateProfileSectionA
TlsGetValue
GetProcessVersion
GetStringTypeW
CreateEventW
GetProcessHeap
GetPrivateProfileIntW
VirtualProtect
DeleteFileA
FindAtomA
lstrlenA
HeapFree
ResumeThread
CreateEventW
GetDriveTypeA
CreateEventW
clbcatq
DllGetClassObject
ComPlusMigrate
SetupOpen
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
SetupOpen
SetupOpen
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
pdh
PdhAddCounterA
PdhGetLogFileSize
PdhCloseLog
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ