Static task
static1
Behavioral task
behavioral1
Sample
2ecccc499dae31178a4bb8c3e62d094a5b55e891aff25af53b111b011c25ef3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ecccc499dae31178a4bb8c3e62d094a5b55e891aff25af53b111b011c25ef3b.exe
Resource
win10v2004-20220812-en
General
-
Target
2ecccc499dae31178a4bb8c3e62d094a5b55e891aff25af53b111b011c25ef3b
-
Size
9KB
-
MD5
a0e8820a465d91022e2d190f4a0ef220
-
SHA1
bbceae1b2a8a4b361a915b53b37945cd478daab1
-
SHA256
2ecccc499dae31178a4bb8c3e62d094a5b55e891aff25af53b111b011c25ef3b
-
SHA512
62f7f6033453d555add0bdf77deeac13f3d24c49ed5cc93423561780ba1416f61ab40254ba67755854381e722837a244abb78685d37fde41e08bb2665954bf2a
-
SSDEEP
192:Ba5lQ38nkcjVXbuibWDQiE6uJOMnKf2fcicWd81CWh1GIy:BN3KfVNOQ95JObf22Wd81CWh1GI
Malware Config
Signatures
Files
-
2ecccc499dae31178a4bb8c3e62d094a5b55e891aff25af53b111b011c25ef3b.exe windows x86
83bf6279404cad22e160b45ceefc0cb4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsicmp
fclose
vswprintf
wprintf
fwprintf
printf
wcsrchr
wcscpy
_controlfp
_wfopen
advapi32
LsaClose
LsaRemoveAccountRights
LsaEnumerateAccountsWithUserRight
LsaOpenPolicy
RegQueryValueExW
RegOpenKeyExW
LsaFreeMemory
kernel32
GetTickCount
GetCurrentThreadId
GetModuleFileNameW
GetLastError
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleA
ntdll
RtlInitUnicodeString
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE