Static task
static1
Behavioral task
behavioral1
Sample
ec4e9ca51a80b8176cab59acab1f4ce7a8300cb364118fa3950bd1e88777f914.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ec4e9ca51a80b8176cab59acab1f4ce7a8300cb364118fa3950bd1e88777f914.exe
Resource
win10v2004-20220812-en
General
-
Target
ec4e9ca51a80b8176cab59acab1f4ce7a8300cb364118fa3950bd1e88777f914
-
Size
61KB
-
MD5
80315e75b440cbd325323f174fbfa465
-
SHA1
5b1801cc60a806502e9e0087832dd309a38ada7a
-
SHA256
ec4e9ca51a80b8176cab59acab1f4ce7a8300cb364118fa3950bd1e88777f914
-
SHA512
001e4602d82fde748427eb3665a66bd0e7387f717ef8eb17934bc9183d71db9bc84d51560052473797b8678150ec55b2b233d56fa4c1c37aa8f314892017dc47
-
SSDEEP
1536:FRZaBWuh/oJphUmBxYtfRjn8Oq2Xvf6cTgqMkyCM:F3aBZ1MIBpyCM
Malware Config
Signatures
Files
-
ec4e9ca51a80b8176cab59acab1f4ce7a8300cb364118fa3950bd1e88777f914.exe windows x86
c215f1e3cf5217bee847f11696a1d185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
Module32NextW
GetCurrentConsoleFont
TrimVirtualBuffer
lstrcpy
BaseQueryModuleData
InterlockedPopEntrySList
CloseProfileUserMapping
GetCommandLineW
SetConsoleTextAttribute
SetTermsrvAppInstallMode
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE