Ip
Static task
static1
Behavioral task
behavioral1
Sample
ecdbebfad72c6ceca3cee5bc4843f7df6bddb86f3d67dd5f16cc5b9cee8b0206.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecdbebfad72c6ceca3cee5bc4843f7df6bddb86f3d67dd5f16cc5b9cee8b0206.exe
Resource
win10v2004-20220812-en
General
-
Target
ecdbebfad72c6ceca3cee5bc4843f7df6bddb86f3d67dd5f16cc5b9cee8b0206
-
Size
155KB
-
MD5
1ddf24afb515caf1faf2eebda651ffac
-
SHA1
e597c41603d653fe44bf608467870ae43be822db
-
SHA256
ecdbebfad72c6ceca3cee5bc4843f7df6bddb86f3d67dd5f16cc5b9cee8b0206
-
SHA512
7b4f524a4f14be1a1c5526aab319ee914695a30398e5e061504dd4d76995c1a5c6f59338667188ab77eccbbe325290715d1acdcd34464129162e367cf61e9b7c
-
SSDEEP
3072:ZCPZ9uL11yu46qfPr6WjhKGdzALTZCl+VFbe1N9JJuusBBlMPmuf6znw9rzy0Sw7:sPZ9up1v46q3RhKGdzAQm4N9JJzqyyLi
Malware Config
Signatures
Files
-
ecdbebfad72c6ceca3cee5bc4843f7df6bddb86f3d67dd5f16cc5b9cee8b0206.exe windows x86
7640fc0639dcbd5773abcc406647f4f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
WideCharToMultiByte
SetEnvironmentVariableA
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
Sleep
VirtualProtect
VirtualFree
IsBadReadPtr
HeapFree
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ