Static task
static1
Behavioral task
behavioral1
Sample
eec80f7ffaf645186d423ed3be7ee33355daa4278cd0e487272a7acdb79b1ded.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eec80f7ffaf645186d423ed3be7ee33355daa4278cd0e487272a7acdb79b1ded.exe
Resource
win10v2004-20220901-en
General
-
Target
eec80f7ffaf645186d423ed3be7ee33355daa4278cd0e487272a7acdb79b1ded
-
Size
392KB
-
MD5
77849bbc652d8ae3989c932281fea333
-
SHA1
9dbca2a6bd71ac3e4c441ee7c7b557c611760344
-
SHA256
eec80f7ffaf645186d423ed3be7ee33355daa4278cd0e487272a7acdb79b1ded
-
SHA512
3c413b89f9986a12c06e5de71fa0139bc619ec989e41469a3e1f104dfe1ba4f103700b147ff3e1b274e9ef87ed7095f064437454ef266ce7d86e039b3c3cb2ef
-
SSDEEP
12288:kE4/k/ht3JzqqziId+gX2S6aTny2uKmrE:kE4spt3tLGId+gm6Rur
Malware Config
Signatures
Files
-
eec80f7ffaf645186d423ed3be7ee33355daa4278cd0e487272a7acdb79b1ded.exe windows x86
9685d9e851eedf96c4e1533f204e76a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedIncrement
GetTickCount
Sleep
VirtualFree
InterlockedIncrement
Sleep
VirtualFree
GetStdHandle
CloseHandle
fde
DllGetClassObject
quartz
AMGetErrorTextA
DBToAmpFactor
advapi32
RegQueryValueExA
RegOpenKeyExA
ole32
OleDraw
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
IsValidPtrIn
IsValidPtrOut
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoGetMalloc
CoUninitialize
CoInitialize
crypt32
RegQueryValueExU
RegDeleteValueU
RegEnumValueU
RegOpenKeyExU
RegSetValueExU
Sections
.text Size: 1024B - Virtual size: 973B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 894KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE