Static task
static1
Behavioral task
behavioral1
Sample
ee31dbfd26ab368c143e660d7df651dd79c3822dd43ab2eeadf443660b8cff9d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee31dbfd26ab368c143e660d7df651dd79c3822dd43ab2eeadf443660b8cff9d.exe
Resource
win10v2004-20220812-en
General
-
Target
ee31dbfd26ab368c143e660d7df651dd79c3822dd43ab2eeadf443660b8cff9d
-
Size
495KB
-
MD5
699d9d1bf32289638b9854e412897420
-
SHA1
c011433f4e0120d508c5aec4a09b69bf7d980b37
-
SHA256
ee31dbfd26ab368c143e660d7df651dd79c3822dd43ab2eeadf443660b8cff9d
-
SHA512
4a50ff12139d564befd77f539e3632b53ae978dc62eba8a4664bb9d1f39f2f7f1ac3573c9f54c543e190d803326d01666eeacd7c61f8b5d2fff83f3630c15f7d
-
SSDEEP
12288:VUgU7EzFhvCq7/K29GJlk+aLvqrqru9kRke8PwdP:VfUQzTt27fkruqSaRkHPwJ
Malware Config
Signatures
Files
-
ee31dbfd26ab368c143e660d7df651dd79c3822dd43ab2eeadf443660b8cff9d.exe windows x86
4ff4ca1d70b03814e106b2b801c4a9a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCancelIoFile
ole32
HACCEL_UserMarshal
user32
GetMessageExtraInfo
kernel32
GetCommandLineW
Sections
.text Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 251B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE