Static task
static1
Behavioral task
behavioral1
Sample
ecafdc5ff7bea25c11c3d5edd330603002322b888fd004ad5d12afb34c64bdeb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ecafdc5ff7bea25c11c3d5edd330603002322b888fd004ad5d12afb34c64bdeb.exe
Resource
win10v2004-20221111-en
General
-
Target
ecafdc5ff7bea25c11c3d5edd330603002322b888fd004ad5d12afb34c64bdeb
-
Size
117KB
-
MD5
88b8c4a4497ce1a1702831861ebbae8c
-
SHA1
ccd22b99eed01ec4a5480eaf1ef679fb5f193460
-
SHA256
ecafdc5ff7bea25c11c3d5edd330603002322b888fd004ad5d12afb34c64bdeb
-
SHA512
cbc62a03538e520bc4f3d2b051fd30234d1fc83c04814b1f8ae1215e946ed9a906ad6b21cf5544a885b0556d8907ab4ba5d50f99970a9d162e0022b1cffa8f63
-
SSDEEP
1536:QUtcXKTdmq6tuP0dmqlPxRxMsI4OhRlPTrrremGG+mGGuZ5xnQtEb:Q1XaP00qlPxRxA22Eb
Malware Config
Signatures
Files
-
ecafdc5ff7bea25c11c3d5edd330603002322b888fd004ad5d12afb34c64bdeb.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ