Static task
static1
Behavioral task
behavioral1
Sample
ee869312ca0b08b442dddfc133327fc6e1cd2df1ea63ef1b8a4b903cbc51bec6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee869312ca0b08b442dddfc133327fc6e1cd2df1ea63ef1b8a4b903cbc51bec6.exe
Resource
win10v2004-20220812-en
General
-
Target
ee869312ca0b08b442dddfc133327fc6e1cd2df1ea63ef1b8a4b903cbc51bec6
-
Size
108KB
-
MD5
0c400fb59d0fb732215aa2653155f111
-
SHA1
66ca7c7d1c71a1998dca381b80c833d6ebb0a0ee
-
SHA256
ee869312ca0b08b442dddfc133327fc6e1cd2df1ea63ef1b8a4b903cbc51bec6
-
SHA512
df076ce139fdd51883e5e77c5126ee13aebd4d6371cc736d9ad33decf64190091166dd815d0a53aed730753677ace5014caced844fe4f9075b3aff223a2878ca
-
SSDEEP
3072:t51rTtKoeU3/rXaGgaA3UIQ9QDMm8kYA1:t71Ko93zX1pAY9QMS1
Malware Config
Signatures
Files
-
ee869312ca0b08b442dddfc133327fc6e1cd2df1ea63ef1b8a4b903cbc51bec6.exe windows x86
400543e2fd18d5db20f452825e1bf413
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
lstrcmpA
VirtualProtect
lstrcpyA
Sleep
LocalFileTimeToFileTime
MultiByteToWideChar
GetCurrentThread
GetModuleHandleA
GetSystemDefaultLCID
SizeofResource
GetLocaleInfoA
GetConsoleOutputCP
GetPrivateProfileStringA
SetCurrentDirectoryA
GlobalUnlock
LoadResource
VirtualQuery
GetDateFormatA
GetProcAddress
SetFilePointer
GetConsoleMode
GetThreadLocale
RtlMoveMemory
GlobalFree
CreateFileMappingA
GetTempPathA
MulDiv
DeleteFileA
msvcrt
__p___initenv
_controlfp
__getmainargs
__p__commode
_except_handler3
_XcptFilter
_adjust_fdiv
__p__fmode
__set_app_type
_initterm
_exit
tan
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Yqewop Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ