Static task
static1
Behavioral task
behavioral1
Sample
5ecca12b920c7265ead97f41c320a0f860d5994036249963ed9522bea72c47e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ecca12b920c7265ead97f41c320a0f860d5994036249963ed9522bea72c47e2.exe
Resource
win10v2004-20220812-en
General
-
Target
5ecca12b920c7265ead97f41c320a0f860d5994036249963ed9522bea72c47e2
-
Size
204KB
-
MD5
08240600338fbde5283f7167c385ccf1
-
SHA1
0a6f1d13c22c24cdf0cf5f257539c62cb39a5e83
-
SHA256
5ecca12b920c7265ead97f41c320a0f860d5994036249963ed9522bea72c47e2
-
SHA512
8a5c0b00aff31af0d3211cc4feeb375641fe0da0747abec084b694d719e3819e4215735b4b5ff9e00ef750bc4812d1f6d217f5298f2dd99a84f7aea6c90682bb
-
SSDEEP
3072:h4oni3QVe2DWlyj3MPueeLsYP0tZwkny0Qy+necSFUl6jXautZ:hPnN3BjcPueq0tZwknuyY6E6
Malware Config
Signatures
Files
-
5ecca12b920c7265ead97f41c320a0f860d5994036249963ed9522bea72c47e2.exe windows x86
1c3ca64facd23c1b89e81342302a0251
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
GetVersionExA
WideCharToMultiByte
LocalFree
WaitForSingleObject
InterlockedDecrement
FormatMessageA
CloseHandle
CreateProcessA
lstrlenW
GetCommandLineA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetSystemInfo
VirtualProtect
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetCPInfo
GetOEMCP
LoadLibraryA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetACP
GetStringTypeW
InterlockedExchange
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
IsBadWritePtr
GetLastError
MultiByteToWideChar
lstrlenA
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
ExitProcess
HeapReAlloc
HeapAlloc
SetUnhandledExceptionFilter
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
user32
LoadStringA
CreateDialogParamA
LoadIconA
SendMessageA
MonitorFromWindow
GetMonitorInfoA
GetWindowRect
SetWindowPos
MessageBoxA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
GetDlgItem
SetWindowTextA
EnumThreadWindows
PostQuitMessage
IsWindowVisible
GetClassNameA
SetTimer
advapi32
RegSetValueA
RegCreateKeyA
ole32
CoInitialize
CoCreateInstance
OleRun
oleaut32
SysFreeString
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
SysAllocString
VariantClear
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ