Static task
static1
Behavioral task
behavioral1
Sample
ee601d0accb27628a2b6a1b69b47a1117fdb32d13dbceba729dd473faa2e1d54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee601d0accb27628a2b6a1b69b47a1117fdb32d13dbceba729dd473faa2e1d54.exe
Resource
win10v2004-20221111-en
General
-
Target
ee601d0accb27628a2b6a1b69b47a1117fdb32d13dbceba729dd473faa2e1d54
-
Size
220KB
-
MD5
df80df89462ab2611449d524c238de96
-
SHA1
7cbf36c6d4ae7669c9f425f20a06c7d1bf08c393
-
SHA256
ee601d0accb27628a2b6a1b69b47a1117fdb32d13dbceba729dd473faa2e1d54
-
SHA512
bbd4f3d9ac871e85aa10bfb1f63a3505e12aae66747f90f485742147840ae622fb241303a64e4e1cc7daf71a76184c4a5f2b580d876715fb3fd18fa5f72116d7
-
SSDEEP
3072:E0x3mihIESr0c6dFE+CjpnQ6aLanTQmutOmXtspt1ENdZQH3MjH12letwRfVJ:pDy9ObCjpVct
Malware Config
Signatures
Files
-
ee601d0accb27628a2b6a1b69b47a1117fdb32d13dbceba729dd473faa2e1d54.exe windows x86
e34bc25fcfc73cdb0717c2e7b226bb17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
UnhandledExceptionFilter
GetLastError
UnmapViewOfFile
SetEndOfFile
OutputDebugStringA
DeleteFileA
FormatMessageW
FormatMessageA
GetModuleHandleA
FreeLibrary
MapViewOfFile
GetTempFileNameA
HeapAlloc
GetCurrentProcessId
FindNextFileA
WriteFile
FindClose
GetFullPathNameA
GetPrivateProfileSectionA
SetErrorMode
HeapFree
GetSystemTimeAsFileTime
GetFileSize
OpenProcess
CloseHandle
GetPrivateProfileStringA
GetTickCount
GetProcessHeap
SetUnhandledExceptionFilter
GetCurrentThreadId
SetCurrentDirectoryA
GetModuleHandleW
TerminateProcess
CreateFileMappingA
ExpandEnvironmentStringsA
LocalAlloc
SetFilePointer
RemoveDirectoryA
LocalFree
SetFileAttributesA
QueryPerformanceCounter
CreateFileA
GetDateFormatW
GetDateFormatA
CompareStringW
CompareStringA
LoadLibraryA
user32
IsClipboardFormatAvailable
GetWindowRect
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ