Static task
static1
Behavioral task
behavioral1
Sample
0ebcf7d9c7158ff20804ee09f2055e5cc866a8502449a41b535803f22cc6a4d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0ebcf7d9c7158ff20804ee09f2055e5cc866a8502449a41b535803f22cc6a4d6.exe
Resource
win10v2004-20220901-en
General
-
Target
0ebcf7d9c7158ff20804ee09f2055e5cc866a8502449a41b535803f22cc6a4d6
-
Size
111KB
-
MD5
64f5f348c8dfbc9c241f3f4d0c9a93ce
-
SHA1
7df3dcf81c9035ea437e33f0557d183387442878
-
SHA256
0ebcf7d9c7158ff20804ee09f2055e5cc866a8502449a41b535803f22cc6a4d6
-
SHA512
e770dfd32bffe1cbdfcb2dc2a91d8b3bb3d584391a8bf8c80c1864e6c481c19d535fbea035e61caca9b839b30685229deac5bf360c58f1842ff191994569cf37
-
SSDEEP
1536:1Uv5ei5trsruc3nNsnK/HNJJtHOlMvTHvTUQ/wJNUQSU1cDtgN1EIk6iZPNA:C5tr/cdFvzPO8bSKDtwDkFLA
Malware Config
Signatures
Files
-
0ebcf7d9c7158ff20804ee09f2055e5cc866a8502449a41b535803f22cc6a4d6.exe windows x86
2ca55ab615a1c1f615f8ecb0031dfd53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateIoCompletionPort
WideCharToMultiByte
GetPrivateProfileIntW
ExpungeConsoleCommandHistoryA
ConvertFiberToThread
DecodePointer
GlobalFix
GetCurrentThread
RtlUnwind
GetNamedPipeInfo
GetSystemTimes
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 97KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cduupqo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE