Static task
static1
Behavioral task
behavioral1
Sample
ec099e5b4039d88cdfd225f96b028e0f285971298779ff278230d35f45470972.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec099e5b4039d88cdfd225f96b028e0f285971298779ff278230d35f45470972.exe
Resource
win10v2004-20220812-en
General
-
Target
ec099e5b4039d88cdfd225f96b028e0f285971298779ff278230d35f45470972
-
Size
59KB
-
MD5
7ef6cf27ee6bf60614a6773754beb4ac
-
SHA1
86c42dcd032536a56c44e1b9527926b9f33ed361
-
SHA256
ec099e5b4039d88cdfd225f96b028e0f285971298779ff278230d35f45470972
-
SHA512
2032c0a5727423f1797e74a80c0a8c97f8bdcb10111babc4dcbac33368dac8188c7b8711cb072a79a76e4612436d67a60a7dcbd1368f911ffc48fd0b394bcc97
-
SSDEEP
1536:Fh66Imac1l8CUR0hi4RlyezKeShD2ucSHm7SWf5AWGpwzXUS:FUcVHP6hDncLXRgpuv
Malware Config
Signatures
Files
-
ec099e5b4039d88cdfd225f96b028e0f285971298779ff278230d35f45470972.exe windows x86
92f4089cd95276bdc9bce69521992147
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextW
urlmon
URLDownloadToFileW
shell32
ShellExecuteW
Sections
.MPRESS1 Size: 50KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE