Static task
static1
Behavioral task
behavioral1
Sample
ecfa0e7f026cf5374ee8e142282e7d7ed3603d44445418756f27aaed7820461c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ecfa0e7f026cf5374ee8e142282e7d7ed3603d44445418756f27aaed7820461c.exe
Resource
win10v2004-20220812-en
General
-
Target
ecfa0e7f026cf5374ee8e142282e7d7ed3603d44445418756f27aaed7820461c
-
Size
249KB
-
MD5
469edd11189ffe85138e296416e079c5
-
SHA1
4dae597123cb535e1ce8f9d8d1955c6e1cbcf619
-
SHA256
ecfa0e7f026cf5374ee8e142282e7d7ed3603d44445418756f27aaed7820461c
-
SHA512
256efa5a39cbeae979c5450d603053c3a6cab29fecad42299dbc7acf8ae7324783244897433bb6f0b105db11c4bf71b9ff5a7d2f4cb341f6ac76cca22954048b
-
SSDEEP
6144:/K8pV3SRHEpAqz5b8pV6Ft2/l3oZfmOPv7Cg7HJQEj0BP3Jkv6:JpcEfK/Wdmcv7pDJiho6
Malware Config
Signatures
Files
-
ecfa0e7f026cf5374ee8e142282e7d7ed3603d44445418756f27aaed7820461c.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 217KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE