Static task
static1
Behavioral task
behavioral1
Sample
ec5533482c3d9879888f1991e57bf5ab85447aca2e11016f0cfde088c4d8d243.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ec5533482c3d9879888f1991e57bf5ab85447aca2e11016f0cfde088c4d8d243.exe
Resource
win10v2004-20220812-en
General
-
Target
ec5533482c3d9879888f1991e57bf5ab85447aca2e11016f0cfde088c4d8d243
-
Size
8KB
-
MD5
acf857e72e7ee33138fe1f09f264b9e9
-
SHA1
c20486076f39f5ef48ed02aeec12bbf99edf3d94
-
SHA256
ec5533482c3d9879888f1991e57bf5ab85447aca2e11016f0cfde088c4d8d243
-
SHA512
da6a0312740c8288fd5b5bc10d81c3990c21ff9d25dfed9cb201ebaef7d4f1521b7f2e490b153a97db2588973480d2ed3ea5b5138c9f33d0d18a8bb470731bf6
-
SSDEEP
96:OOkgSr8tXu0WvWGMll2whjWFjE0xHHVGhGDHzOmHW3/lvm:OOkgMkxWur2TNnVi6TOm2d+
Malware Config
Signatures
Files
-
ec5533482c3d9879888f1991e57bf5ab85447aca2e11016f0cfde088c4d8d243.exe windows x86
d16a90d181b0ba0e5dff46cd9a45348e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetStdHandle
CreateThread
VirtualAlloc
CompareStringA
GetUserDefaultLangID
GlobalFindAtomA
LocalAlloc
GetPriorityClass
LocalHandle
ReleaseMutex
GetModuleHandleA
LoadResource
GlobalLock
TlsFree
OpenSemaphoreA
GlobalFlags
GlobalFree
GetProcessHeap
GetVolumeInformationA
TlsGetValue
user32
GetActiveWindow
GetDC
GetWindow
RegisterClassA
GetWindowTextLengthA
GetForegroundWindow
ReleaseDC
EndPaint
DrawEdge
GetFocus
ShowWindow
GetWindowTextA
ValidateRect
IsIconic
CloseWindow
BeginPaint
GetParent
GetClassNameA
GetClassInfoExA
shell32
SHGetFolderPathA
SHGetMalloc
SHChangeNotify
SHBrowseForFolderA
SHGetFileInfoA
userenv
GetGPOListA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ