Static task
static1
Behavioral task
behavioral1
Sample
ecf3645d9eccdb8288e1c283742b84974ec3f0913d72650d662a5d6fe2e50971.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ecf3645d9eccdb8288e1c283742b84974ec3f0913d72650d662a5d6fe2e50971.exe
Resource
win10v2004-20220812-en
General
-
Target
ecf3645d9eccdb8288e1c283742b84974ec3f0913d72650d662a5d6fe2e50971
-
Size
810KB
-
MD5
07f7d55c271247af1a930e7c37d5aa4a
-
SHA1
c1fb503393818a33c6df55cae99c17cbd52fe2f4
-
SHA256
ecf3645d9eccdb8288e1c283742b84974ec3f0913d72650d662a5d6fe2e50971
-
SHA512
0853a8f94477809e979190f8727a2672c104ae6e9c261c4d335abe57ffc0613c671efe06ef9d654f7458e839de3fce7600e618319a778ca1c5571f2a79c82f73
-
SSDEEP
24576:fmZCW9p/ZnkYA4ViAFZhs6pVhR1kMduRKl:OfZlA4RFZhT1u
Malware Config
Signatures
Files
-
ecf3645d9eccdb8288e1c283742b84974ec3f0913d72650d662a5d6fe2e50971.exe windows x86
1869222168e3a8700936ab4fe8813ee2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyW
lstrcatA
CreateEventA
SetFileTime
HeapSize
HeapCreate
SetConsoleTitleA
GetStringTypeA
CloseHandle
LoadLibraryA
GetStartupInfoW
SetFileTime
SetFileTime
GetExitCodeProcess
IsBadWritePtr
GetLastError
LeaveCriticalSection
GetFileSize
InterlockedExchange
GetModuleHandleA
ReadFile
mstscax
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
shell32
DragFinish
SHGetSettings
StrChrA
ShellMessageBoxW
DragQueryFileA
ExtractIconA
DragAcceptFiles
ShellAboutA
SHGetMalloc
SHFree
DllUnregisterServer
DuplicateIcon
SHGetDiskFreeSpaceA
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 798KB - Virtual size: 798KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ