Static task
static1
Behavioral task
behavioral1
Sample
ec898e74a4d5c1e517569494780de69c13a0780daba7a40f0bcb37f02123cccc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ec898e74a4d5c1e517569494780de69c13a0780daba7a40f0bcb37f02123cccc.exe
Resource
win10v2004-20221111-en
General
-
Target
ec898e74a4d5c1e517569494780de69c13a0780daba7a40f0bcb37f02123cccc
-
Size
76KB
-
MD5
6cbb3bac097b49c9142284943e872026
-
SHA1
50d2d9bd3470ccd873ca7950eda9b5cd6634b564
-
SHA256
ec898e74a4d5c1e517569494780de69c13a0780daba7a40f0bcb37f02123cccc
-
SHA512
98708490a2779e44536753ccef4351fff9099b257601376cee8ea3441548d1cacd8edf902ea8c16be9d345fc9428122ec1a20c3b50a6fa8c0d16ad9617795dc6
-
SSDEEP
1536:IVyYWYTzXLNBNf8VsdcOOABDmZZmfhopjVrs2ryrd1vUQuq6:jYWYPXBvdMAvoHs2qo
Malware Config
Signatures
Files
-
ec898e74a4d5c1e517569494780de69c13a0780daba7a40f0bcb37f02123cccc.exe windows x86
05993789935755062d719a304046da74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
ExitProcess
GetConsoleHardwareState
WriteProfileStringW
GetDefaultCommConfigA
CreateProcessInternalW
GetProfileStringA
GetSystemTimeAsFileTime
LocalUnlock
SetConsoleCommandHistoryMode
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE