Static task
static1
Behavioral task
behavioral1
Sample
ee6eed3150bab7d18dabc26fb09411901c5cdf519f787456a5541438bc43ec22.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ee6eed3150bab7d18dabc26fb09411901c5cdf519f787456a5541438bc43ec22.exe
Resource
win10v2004-20220901-en
General
-
Target
ee6eed3150bab7d18dabc26fb09411901c5cdf519f787456a5541438bc43ec22
-
Size
49KB
-
MD5
00428127eddae34fa7b1603cb47805e7
-
SHA1
25de1bf7dae8c3e2c0398457e402fcaec01619fc
-
SHA256
ee6eed3150bab7d18dabc26fb09411901c5cdf519f787456a5541438bc43ec22
-
SHA512
dc8a97d6fe60672757de5c6c603c60fe521744fb1963a622e64097f8d1c4a57fb699d21da2c588b8aca6f8b2653bce1b05008a50ac7b1b2be00156ac1d11f27e
-
SSDEEP
1536:+jyjMEMkiz3EdxVFwGw+KTRhXA6wdfEfIozNfT:ukiz0d2Gk9hmdfEfIo5
Malware Config
Signatures
Files
-
ee6eed3150bab7d18dabc26fb09411901c5cdf519f787456a5541438bc43ec22.exe windows x86
2d24548e08f9bfdc246ee774e18cef22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
GetModuleFileNameA
CopyFileA
Sleep
DeleteFileA
GetSystemDirectoryA
SetCurrentDirectoryA
GetWindowsDirectoryA
LoadLibraryA
GetCurrentProcess
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
Module32Next
Module32First
CreateToolhelp32Snapshot
GetProcAddress
GetModuleHandleA
CloseHandle
GetFileAttributesA
SetFileAttributesA
user32
EnumWindows
PostMessageA
wsprintfA
GetWindowThreadProcessId
advapi32
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
msvcrt
sprintf
_strcmpi
strstr
strncpy
_stricmp
_strlwr
strrchr
Sections
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ