Static task
static1
Behavioral task
behavioral1
Sample
0ec3fd6024a6485b16aaa00d55f74af2c26c53e75b1206215646e1cd69bb456e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0ec3fd6024a6485b16aaa00d55f74af2c26c53e75b1206215646e1cd69bb456e.exe
Resource
win10v2004-20220812-en
General
-
Target
0ec3fd6024a6485b16aaa00d55f74af2c26c53e75b1206215646e1cd69bb456e
-
Size
160KB
-
MD5
96d2d698b478633965d0345011070af0
-
SHA1
20a0d2317de24122020a3e4fd064e6e4e5565167
-
SHA256
0ec3fd6024a6485b16aaa00d55f74af2c26c53e75b1206215646e1cd69bb456e
-
SHA512
b18d524b63179f2a2a3dbcf2c6de50aae20603789fc6549f4ec30502384fe88278ba6b273912081e29b749946a8bbbee5edb445ed935cfca4069d25dec85c470
-
SSDEEP
3072:JZFPw8Du42FQ6pi96GV4xBWR0odkEadv/S4xS9VUQof1Yrhb4QL:JZF3DsFQ6pi9exB0dk7/xiVlhb4QL
Malware Config
Signatures
Files
-
0ec3fd6024a6485b16aaa00d55f74af2c26c53e75b1206215646e1cd69bb456e.exe windows x86
3e49a3b064ab6b62aa932288f1523cbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strncpy
memcpy
_CIsinh
_CIatan
_CIlog10
floor
ceil
_CIpow
_CIlog
_CIacos
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
user32
CallWindowProcA
wsock32
closesocket
WSACleanup
WSAStartup
winmm
mciSendCommandA
Sections
.code Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ta Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
src Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ