Static task
static1
Behavioral task
behavioral1
Sample
ee096fd472acd17c71a5681fed030bb2537b9a7149ba2e970a1463ecb99c12fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee096fd472acd17c71a5681fed030bb2537b9a7149ba2e970a1463ecb99c12fc.exe
Resource
win10v2004-20220812-en
General
-
Target
ee096fd472acd17c71a5681fed030bb2537b9a7149ba2e970a1463ecb99c12fc
-
Size
445KB
-
MD5
200020041b837e2ade1a00a32c7ed7c0
-
SHA1
8648628977186eced3442a2f861383907775f9b2
-
SHA256
ee096fd472acd17c71a5681fed030bb2537b9a7149ba2e970a1463ecb99c12fc
-
SHA512
7019e585bb2ec048b97428538bfd882e9c92ac01ee901e0ba7cc2235098b8766a9e9d5eb92eb9abb9d0a7a80273323c768fed663149fd1b775edcf92b399635b
-
SSDEEP
6144:7hTYhxdYtFqcxLdbGp43EQOr99QPJCNEsBegA3R0FWLdb5lXdJji/WQbC15/xl:7hTYhP8FqcSvLN11AB0F0dbbP2OQb+x
Malware Config
Signatures
Files
-
ee096fd472acd17c71a5681fed030bb2537b9a7149ba2e970a1463ecb99c12fc.exe windows x86
9f8d6b4416e76be9a5e22d03429f8007
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
MSChapSrvChangePassword
ntdll
RtlDeregisterWait
user32
GetCapture
kernel32
GetUserDefaultLCID
Sections
.text Size: 442KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE