Static task
static1
Behavioral task
behavioral1
Sample
eca60774c1d56172f36a19fbbd46d5588e0f0c243cc4e9c9b45b67c7f7721005.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eca60774c1d56172f36a19fbbd46d5588e0f0c243cc4e9c9b45b67c7f7721005.exe
Resource
win10v2004-20220812-en
General
-
Target
eca60774c1d56172f36a19fbbd46d5588e0f0c243cc4e9c9b45b67c7f7721005
-
Size
141KB
-
MD5
317dfaa86863154322280df7da50abe6
-
SHA1
ef7f35f88b32c4c2a3023acbf20730af42d15251
-
SHA256
eca60774c1d56172f36a19fbbd46d5588e0f0c243cc4e9c9b45b67c7f7721005
-
SHA512
342246b84b72805f942a90d5c998cf026ae31c49939c88c6acaf8a2197abe0267c2061f787439163a679c5deffb001064367b0364e7c746027b403c2e7268ee0
-
SSDEEP
3072:kwew97dkEtMZT8VNArZKb4PHbOorQ2pTDqL8+llQx4S:kweqKGjArJHtk2p1vx4
Malware Config
Signatures
Files
-
eca60774c1d56172f36a19fbbd46d5588e0f0c243cc4e9c9b45b67c7f7721005.exe windows x86
6c130ca83bab6d22627f2ecb524be007
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
DeviceIoControl
ExpandEnvironmentStringsA
FileTimeToDosDateTime
GetACP
GetExitCodeProcess
GetFileSize
GetLocalTime
GetSystemTimeAsFileTime
GlobalDeleteAtom
GlobalHandle
HeapReAlloc
HeapSize
LocalAlloc
LocalFileTimeToFileTime
ReleaseMutex
Sleep
user32
ClientToScreen
GetActiveWindow
GetWindowThreadProcessId
IsWindowEnabled
KillTimer
LoadCursorA
PostMessageA
SetTimer
UnregisterClassA
UpdateWindow
gdi32
CombineRgn
SelectObject
SetMapMode
shell32
ExtractAssociatedIconW
SHBrowseForFolder
SHGetFileInfoA
Shell_NotifyIconA
comctl32
CreatePropertySheetPageA
CreateToolbarEx
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_Read
ImageList_SetImageCount
ImageList_Write
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ