Static task
static1
Behavioral task
behavioral1
Sample
ecc311289a867f807944d653fbdae717abbcba0f06535b565594c5230060a65c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecc311289a867f807944d653fbdae717abbcba0f06535b565594c5230060a65c.exe
Resource
win10v2004-20221111-en
General
-
Target
ecc311289a867f807944d653fbdae717abbcba0f06535b565594c5230060a65c
-
Size
536KB
-
MD5
15ab4282f13ec42aa2764dcab10f881a
-
SHA1
4fc57294fe35f63963d89d17a891f56cc0e80dc6
-
SHA256
ecc311289a867f807944d653fbdae717abbcba0f06535b565594c5230060a65c
-
SHA512
ba2fb02b21c3c588bddcdc1b9e7d94c3915c5b2f20fdca386afd79f789a36deee0d050cabdc99c656401a8452160f0d9b2f9597e3caf8a6ff0533e40709a7be6
-
SSDEEP
12288:cI/4V0puvt8k7kEjINM10JDx5+sh8dJSJt:cIgVfvm2aAKDx5fh8d
Malware Config
Signatures
Files
-
ecc311289a867f807944d653fbdae717abbcba0f06535b565594c5230060a65c.exe windows x86
acc760721ebfedc75a19d5a32cf4be7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
HeapCreate
LocalSize
CloseHandle
GetFileTime
CreateFileW
GetConsoleAliasW
GetModuleHandleA
CreateFileMappingW
GetStartupInfoA
DeleteFileA
CloseHandle
IsDebuggerPresent
GetDriveTypeW
LocalFlags
GetModuleFileNameW
DeviceIoControl
GetCommandLineA
FindClose
Sleep
user32
CallWindowProcW
LoadImageA
IsZoomed
DestroyMenu
IsWindow
GetWindowLongA
PeekMessageA
DrawTextW
BeginPaint
DispatchMessageA
GetIconInfo
DispatchMessageA
DestroyWindow
dmcompos
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ