Static task
static1
Behavioral task
behavioral1
Sample
ece00599467f7c47f08f40e35dee8105354d68615971db0150b414883140ccb7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ece00599467f7c47f08f40e35dee8105354d68615971db0150b414883140ccb7.exe
Resource
win10v2004-20220812-en
General
-
Target
ece00599467f7c47f08f40e35dee8105354d68615971db0150b414883140ccb7
-
Size
411KB
-
MD5
80aa1201774de80062bd2aff3ee0f400
-
SHA1
a5e6d8276e035155d2f196f57686cbf8ae1a6f46
-
SHA256
ece00599467f7c47f08f40e35dee8105354d68615971db0150b414883140ccb7
-
SHA512
7cec50a7be91ead5a88ba976cf2592d7e6e8d441323dee5297171589f68fe40df7ca2fa9de3a86ea5120c1f2ed9022f2d93c22fc7bff7a86047c5c666ac90ab2
-
SSDEEP
12288:TZkBUN6/T0M9HmwWhmpR7Y12SmUcuvFrCj:Q/JWhyx8
Malware Config
Signatures
Files
-
ece00599467f7c47f08f40e35dee8105354d68615971db0150b414883140ccb7.exe windows x86
6d1a342692c64f6a2ff64aebed143e2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CancelIo
CreateMailslotW
RemoveDirectoryA
SetLastError
FindClose
VirtualProtect
GetLocaleInfoA
MapViewOfFile
GetFileAttributesA
GetProcessHeap
FindResourceA
GetStdHandle
GetDriveTypeW
ReleaseMutex
ResetEvent
IsBadWritePtr
GetModuleHandleA
CreateDirectoryA
GetExitCodeThread
HeapSize
GetCommandLineA
user32
PostMessageW
DestroyMenu
GetCapture
SetFocus
DispatchMessageA
GetWindowLongW
GetWindowTextW
SetCursor
IsDialogMessageA
wsprintfA
LoadCursorA
PeekMessageA
LoadImageW
ipsmsnap
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ