Static task
static1
Behavioral task
behavioral1
Sample
ecbe681d391fd239f3969623e57012aae95de5e9ecc8624e7e14470a56dd5d49.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ecbe681d391fd239f3969623e57012aae95de5e9ecc8624e7e14470a56dd5d49.exe
Resource
win10v2004-20220812-en
General
-
Target
ecbe681d391fd239f3969623e57012aae95de5e9ecc8624e7e14470a56dd5d49
-
Size
7KB
-
MD5
331b4abd709068c9f915b745ed6c9be3
-
SHA1
38141a60eddeb94982e0e86b5ded5b40e9ed56db
-
SHA256
ecbe681d391fd239f3969623e57012aae95de5e9ecc8624e7e14470a56dd5d49
-
SHA512
e1aba0fc5599258fe4b70951bb9990fbc770da4dbd11832730f6e5359878dc75fe8bc7e3f01cfb25b0699a5863512579868d94b74192232d578a111191dbef30
-
SSDEEP
96:jpF9ieaBSmk8VVdPLM3BihnfwuIg6xmiIxTqqauGturNPrg:jX4tpzGBSndIgMmiIxb0Ag
Malware Config
Signatures
Files
-
ecbe681d391fd239f3969623e57012aae95de5e9ecc8624e7e14470a56dd5d49.exe windows x86
cbb11600ea34f55db69f367478f32293
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
lstrcatA
lstrcpyA
WaitForSingleObject
GetModuleFileNameW
CreateToolhelp32Snapshot
Process32First
CloseHandle
PulseEvent
WideCharToMultiByte
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread
CompareStringA
user32
BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE