Static task
static1
Behavioral task
behavioral1
Sample
c2ece9d36a4be69be97061c40ec752d82ffcef14684c002b5296b9c5e426931b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c2ece9d36a4be69be97061c40ec752d82ffcef14684c002b5296b9c5e426931b.exe
Resource
win10v2004-20220812-en
General
-
Target
c2ece9d36a4be69be97061c40ec752d82ffcef14684c002b5296b9c5e426931b
-
Size
63KB
-
MD5
618bb2a68ca5439a4df78ea6cbab6172
-
SHA1
76bcca30aecd5334ac6ed35f66d8910aecc81753
-
SHA256
c2ece9d36a4be69be97061c40ec752d82ffcef14684c002b5296b9c5e426931b
-
SHA512
6dd2f1ed28ae97273e710d5edfd24115ca337930186d94e124c5488a12e5d17c75b7280726593ec6ad07af88cfebbe490d03bf3faf9c674dfe836d8eb3614f23
-
SSDEEP
1536:ioTq5F4CkMrv2JjI1XdMLM9psESVqufqB5R8NFxtlWEGm7Y:iXFSMGjIzMY9psVVqUa5R8Ndl7Y
Malware Config
Signatures
Files
-
c2ece9d36a4be69be97061c40ec752d82ffcef14684c002b5296b9c5e426931b.exe windows x86
e191bf40bbb7666e5332a1fcd4140034
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
DeactivateActCtx
HeapUnlock
SetNamedPipeHandleState
VirtualFree
SetConsoleCtrlHandler
DuplicateConsoleHandle
BackupRead
DeleteAtom
ReplaceFile
GetThreadPriorityBoost
GetBinaryTypeA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE