Static task
static1
Behavioral task
behavioral1
Sample
ec59843247691f896b663310eb6a7db8ea5f76a8b4471878b89eac96bda774a8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ec59843247691f896b663310eb6a7db8ea5f76a8b4471878b89eac96bda774a8.exe
Resource
win10v2004-20220812-en
General
-
Target
ec59843247691f896b663310eb6a7db8ea5f76a8b4471878b89eac96bda774a8
-
Size
165KB
-
MD5
7657a151efd5a9928eddcbd33a9a9268
-
SHA1
34b89d4d7fe7e784400c75253362b313e3ba5168
-
SHA256
ec59843247691f896b663310eb6a7db8ea5f76a8b4471878b89eac96bda774a8
-
SHA512
36e7a2dfc53ccccb57bc62e677947e08066a8a5cf9c028ceacdcfbeb03bbf92529bfd69ba0b93ecb34a60712e6aaaa1f6744c4a5a6afc0116ed41d8582809b11
-
SSDEEP
3072:MkRnXpU3lbd2e25AsyQ9T+wWWuhomiAZfs5HIyajGBDtP:n5315AFwOho6m5HIpCB
Malware Config
Signatures
Files
-
ec59843247691f896b663310eb6a7db8ea5f76a8b4471878b89eac96bda774a8.exe windows x86
a21193487aa47958a17646907e405391
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_onexit
_setmode
atexit
fclose
fread
fseek
ftell
fwrite
memcmp
memcpy
signal
strcmp
strlen
libgimp-2.0-0
gimp_channel_new
gimp_destroy_params
gimp_drawable_detach
gimp_drawable_fill
gimp_drawable_flush
gimp_drawable_get
gimp_drawable_set_tattoo
gimp_drawable_set_visible
gimp_image_add_channel
gimp_image_add_hguide
gimp_image_add_layer
gimp_image_add_vectors
gimp_image_add_vguide
gimp_image_clean_all
gimp_image_delete
gimp_image_get_colormap
gimp_image_get_layers
gimp_image_height
gimp_image_new
gimp_image_parasite_attach
gimp_image_resize
gimp_image_set_active_layer
gimp_image_set_colormap
gimp_image_set_filename
gimp_image_set_resolution
gimp_image_set_unit
gimp_image_undo_disable
gimp_image_undo_enable
gimp_image_width
gimp_install_procedure
gimp_layer_add_mask
gimp_layer_create_mask
gimp_layer_new
gimp_layer_set_apply_mask
gimp_layer_set_lock_alpha
gimp_layer_set_offsets
gimp_main
gimp_pixel_rgn_init
gimp_pixel_rgn_set_rect
gimp_progress_init_printf
gimp_progress_update
gimp_register_file_handler_mime
gimp_register_magic_load_handler
gimp_register_thumbnail_loader
gimp_run_procedure
gimp_vectors_new
gimp_vectors_stroke_new_from_points
libgimpbase-2.0-0
gimp_any_to_utf8
gimp_filename_to_utf8
gimp_locale_directory
gimp_parasite_free
gimp_parasite_new
libgimpcolor-2.0-0
gimp_cmyk_set
gimp_cmyk_to_rgb
gimp_hsv_set
gimp_hsv_to_rgb
gimp_rgb_set
gimp_rgb_set_alpha
gimp_rgba_set
libexif-12
exif_content_get_entry
exif_content_remove_entry
exif_data_new_from_data
exif_data_save_data
exif_data_unref
libglib-2.0-0
g_ascii_strncasecmp
g_error_free
g_file_error_from_errno
g_file_error_quark
g_fopen
g_free
g_locale_from_utf8
g_log
g_malloc
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_realloc
g_set_error
g_stat
g_strdup
g_strdup_printf
g_strerror
g_string_append_len
g_string_free
g_string_insert_c
g_string_sized_new
g_strlcpy
g_strndup
g_utf16_to_utf8
g_utf8_to_utf16
intl
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
libjpeg-7
jpeg_CreateDecompress
jpeg_destroy_decompress
jpeg_finish_decompress
jpeg_read_header
jpeg_read_scanlines
jpeg_start_decompress
jpeg_std_error
jpeg_stdio_src
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 208B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE