Static task
static1
Behavioral task
behavioral1
Sample
ecc3385b44e3e5ced3932488ec131974fcca2d13dbe66d3b647a767dee17c383.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ecc3385b44e3e5ced3932488ec131974fcca2d13dbe66d3b647a767dee17c383.exe
Resource
win10v2004-20221111-en
General
-
Target
ecc3385b44e3e5ced3932488ec131974fcca2d13dbe66d3b647a767dee17c383
-
Size
84KB
-
MD5
09f028abdf8c35e7e7aefe83cc700700
-
SHA1
f5cd15be6ed90d66a1bea174289acefc7162047d
-
SHA256
ecc3385b44e3e5ced3932488ec131974fcca2d13dbe66d3b647a767dee17c383
-
SHA512
ead3c9f96ca9848804072f9f05e624dbbb7b6ecdf903d68d9d4830a96a7d016529b7033b07038767b229fa378585e18556258ff3e53411172185d896c7ead083
-
SSDEEP
1536:ZbIeU7LYweqUFHe19l2lqySY+A37feaCMJDmYsLIb4PvYqHB/AdGy:Zse2mFql28ySDADeak7dJHB/AdGy
Malware Config
Signatures
Files
-
ecc3385b44e3e5ced3932488ec131974fcca2d13dbe66d3b647a767dee17c383.exe windows x86
aa9388d0a028de28dcae46b63369f34a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetFullPathNameA
GetModuleFileNameA
GetModuleHandleA
FindClose
FindNextFileA
FindFirstFileA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
DeleteFileA
WaitForSingleObject
TerminateProcess
OpenProcess
LCMapStringA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetACP
ExitProcess
RtlUnwind
RaiseException
GetLastError
MoveFileA
GetProcAddress
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
LoadLibraryA
InterlockedExchange
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LCMapStringW
user32
FindWindowA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE