Static task
static1
Behavioral task
behavioral1
Sample
ecdbedeb84dfddc5ab5af3625fcdd3c7ec46d44cb1b30d6173d6261cd7c383aa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ecdbedeb84dfddc5ab5af3625fcdd3c7ec46d44cb1b30d6173d6261cd7c383aa.exe
Resource
win10v2004-20221111-en
General
-
Target
ecdbedeb84dfddc5ab5af3625fcdd3c7ec46d44cb1b30d6173d6261cd7c383aa
-
Size
63KB
-
MD5
31ed461b003c0b7c3508c3405cdadbba
-
SHA1
9ae35d4432604d01ee36324e5a6729776d40d4fb
-
SHA256
ecdbedeb84dfddc5ab5af3625fcdd3c7ec46d44cb1b30d6173d6261cd7c383aa
-
SHA512
5f60adbc5845ca3fe264443c67c7f8efd8510a8b5434d856748cbfee8f2c80c5f837f6c0a7691bb02adf31d4dc3edbea6988381f2d1b133a4bc93695ce95e357
-
SSDEEP
1536:Qd3+EUmTPQ189jxHpMOL0X7DCls7lgrwIjAUbDESrj1u3OmZ9WZJV6+qHHHG8tfz:4XySCbn0uAlpQf4JE
Malware Config
Signatures
Files
-
ecdbedeb84dfddc5ab5af3625fcdd3c7ec46d44cb1b30d6173d6261cd7c383aa.exe windows x86
084fe5633314564c28c1db31dd8a3077
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDefaultCommConfigW
GlobalFindAtomA
ZombifyActCtx
SetConsoleMaximumWindowSize
EnumCalendarInfoExW
TrimVirtualBuffer
VDMConsoleOperation
GlobalGetAtomNameW
FreeLibrary
SetFilePointer
DeleteFiber
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE