Static task
static1
Behavioral task
behavioral1
Sample
ee0cf03a33a368518ab5c280d2a25441640e3bb1f13037bcb19d2bea233e46c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee0cf03a33a368518ab5c280d2a25441640e3bb1f13037bcb19d2bea233e46c7.exe
Resource
win10v2004-20220901-en
General
-
Target
ee0cf03a33a368518ab5c280d2a25441640e3bb1f13037bcb19d2bea233e46c7
-
Size
1.6MB
-
MD5
bed8ecb9f67fbf62eb83e6cfb18fbdce
-
SHA1
f30ea267a57cacb73d57b13f3632e2bbbce4e0b6
-
SHA256
ee0cf03a33a368518ab5c280d2a25441640e3bb1f13037bcb19d2bea233e46c7
-
SHA512
c62cc40a68d7908fdffb9e0b127896793fad692864efd39a807690ac420fd77b6f77e95e72f38154644a4e2298a37b6580e031a7577af38582e5bfffaba6dca6
-
SSDEEP
49152:bVMgEV6piZUxF5dZlFlzt2Z+AtnciCnpVmIry5X3XH64YY0Gl+14ByqjtWHr3Q/E:bVMgEV6pLxF5fXlzts+AtnciCnpVmIrR
Malware Config
Signatures
Files
-
ee0cf03a33a368518ab5c280d2a25441640e3bb1f13037bcb19d2bea233e46c7.exe windows x86
b73699714a5cfc99b7e7d310313fe661
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
user32
MessageBoxA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
VariantClear
urlmon
URLDownloadToFileA
psapi
GetModuleFileNameExA
msvcrt
calloc
iphlpapi
GetInterfaceInfo
ws2_32
inet_ntoa
advapi32
RegDeleteKeyA
Sections
.text Size: 132KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DoKee Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DoKee Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ