Static task
static1
Behavioral task
behavioral1
Sample
e66c6db9915d17ca579e03ecbf54d3c67ffe8fcdc4e969550f8bade113f91b27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e66c6db9915d17ca579e03ecbf54d3c67ffe8fcdc4e969550f8bade113f91b27.exe
Resource
win10v2004-20220812-en
General
-
Target
e66c6db9915d17ca579e03ecbf54d3c67ffe8fcdc4e969550f8bade113f91b27
-
Size
320KB
-
MD5
0ee156f896058dc58b3541f2a7d44010
-
SHA1
973eebef8e658ffcd8efede8a4b63f977efee33f
-
SHA256
e66c6db9915d17ca579e03ecbf54d3c67ffe8fcdc4e969550f8bade113f91b27
-
SHA512
44d0f2c4b28baae94939b6a029af53fda041294aac3151a33f2e11cc7d4e678640ad24b962928734c058437d506e82c7acd6528eabf873c4d621cc987a353cb9
-
SSDEEP
6144:TDdiE/4YzH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:HdiE/p2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
e66c6db9915d17ca579e03ecbf54d3c67ffe8fcdc4e969550f8bade113f91b27.exe windows x86
52f7079edb878ca7e742d433509d63ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugBreakProcess
SwitchToFiber
EndUpdateResourceW
QueryMemoryResourceNotification
InitializeCriticalSectionAndSpinCount
Heap32Next
SetFileApisToANSI
SetTermsrvAppInstallMode
RtlMoveMemory
GetCPInfoExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE