Static task
static1
Behavioral task
behavioral1
Sample
ee3770f2d7e16f23c2edd763eeda3ef3cbce9a48665e990784677c9f967f1a57.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee3770f2d7e16f23c2edd763eeda3ef3cbce9a48665e990784677c9f967f1a57.exe
Resource
win10v2004-20220901-en
General
-
Target
ee3770f2d7e16f23c2edd763eeda3ef3cbce9a48665e990784677c9f967f1a57
-
Size
126KB
-
MD5
3fd9a31c207385bdcaed6586a2dfe5e2
-
SHA1
fcf5a57d4493be87e6b9e0530ccf05d5af78fb71
-
SHA256
ee3770f2d7e16f23c2edd763eeda3ef3cbce9a48665e990784677c9f967f1a57
-
SHA512
f454986f6ff556d0242102c99340218eda6301b178d7289bf78896e58a38b21301bef0919bbd03a94742963c2f76c324fb5d4167845d16a7cc1d092db8262632
-
SSDEEP
3072:RwbBtx4bChwNfO2iNI4/N85DrDEKruK2cncPTb/uz8SqsmTREmTa:REtCbaOGJ189FrAcnQ/uFqTREaa
Malware Config
Signatures
Files
-
ee3770f2d7e16f23c2edd763eeda3ef3cbce9a48665e990784677c9f967f1a57.exe windows x86
af4da243bb06a6189c44722e9d231d10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CallNamedPipeA
CreateEventA
CreateFileMappingA
CreateIoCompletionPort
DeleteFiber
DosDateTimeToFileTime
ExitProcess
FindAtomA
FindResourceA
FindResourceExA
FlushViewOfFile
FoldStringA
GetAtomNameA
GetBinaryTypeA
GetCommMask
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileAttributesA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetThreadLocale
GlobalFlags
GlobalSize
IsSystemResumeAutomatic
LoadResource
LocalFlags
LocalLock
MapViewOfFile
MoveFileExA
MulDiv
QueryDosDeviceA
ReadConsoleA
ReadProcessMemory
SetUnhandledExceptionFilter
SignalObjectAndWait
UnlockFile
VirtualQuery
WaitNamedPipeA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
rand
signal
srand
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE