Static task
static1
Behavioral task
behavioral1
Sample
ec78a2642e546a9667912bf2916372d6af29eac388e1c15e769e92bb7ad88f5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec78a2642e546a9667912bf2916372d6af29eac388e1c15e769e92bb7ad88f5c.exe
Resource
win10v2004-20221111-en
General
-
Target
ec78a2642e546a9667912bf2916372d6af29eac388e1c15e769e92bb7ad88f5c
-
Size
314KB
-
MD5
e68909620daebe4c7072dc797f0cb7c4
-
SHA1
5ac4e7637642fe3f38c9d0a3f500fd86c38e62bc
-
SHA256
ec78a2642e546a9667912bf2916372d6af29eac388e1c15e769e92bb7ad88f5c
-
SHA512
4ad2fe5f47c66e717d42c9d99cb65523e25ec4eb9920fffd0c995ffaeacf1ec27ed0526a8e39ee350239a468fd888f09cb307745617e700bdb469a551bd9f12e
-
SSDEEP
6144:9u0X3JPg5gYgVEZEAzbO336Gb5Kn8WuNOYU/3Rn:9uMg5gYgVE/zbnFn8WuNrG
Malware Config
Signatures
Files
-
ec78a2642e546a9667912bf2916372d6af29eac388e1c15e769e92bb7ad88f5c.exe windows x86
f0c81b6f8530eba9d7b8894954822d1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
shell32
Shell_NotifyIconA
Sections
.text Size: 150KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE