Static task
static1
Behavioral task
behavioral1
Sample
ee9c778ccae89a6c968aff31d17f97c0837c5ff8f0be3006e457d426574de890.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee9c778ccae89a6c968aff31d17f97c0837c5ff8f0be3006e457d426574de890.exe
Resource
win10v2004-20221111-en
General
-
Target
ee9c778ccae89a6c968aff31d17f97c0837c5ff8f0be3006e457d426574de890
-
Size
460KB
-
MD5
3943c5a32a06b05540da0df420d18b9b
-
SHA1
cd2556beba6734a0d967ffedf596d08fed2aa537
-
SHA256
ee9c778ccae89a6c968aff31d17f97c0837c5ff8f0be3006e457d426574de890
-
SHA512
2b584840d374de6716cfe0d717f11955ea5076c3ff03446c58628dc04b6f3226c76d9448c9758d3ed12e0f1b0a77ff5ac5e33a8f38e1de10f20f4f5968667dfc
-
SSDEEP
12288:m4ZLaCJunt7FDygYZ6tIR9AssVvyaMiYwDv8FmXUDSedT3xq:mFC8t7F3YZ6tIRisivy8YdKoLxq
Malware Config
Signatures
Files
-
ee9c778ccae89a6c968aff31d17f97c0837c5ff8f0be3006e457d426574de890.exe windows x86
468cc48da9bc7fa1f25cd1adc987bf08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAllocateVirtualMemory
NtLoadKey
msvcrt
free
_vsnprintf
strcspn
wcschr
_except_handler3
malloc
wcscspn
_mbschr
_adjust_fdiv
strchr
wcslen
_initterm
rpcrt4
RpcBindingFromStringBindingW
I_RpcExceptionFilter
NdrClientCall2
RpcStringBindingComposeW
RpcStringFreeW
RpcBindingFree
user32
LoadStringA
LoadStringW
MessageBoxA
GetSystemMetrics
ws2_32
WSAGetLastError
kernel32
GetCurrentProcess
UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
WideCharToMultiByte
LocalFree
GetCurrentThreadId
LocalAlloc
ExitProcess
Beep
QueryPerformanceCounter
advapi32
MakeSelfRelativeSD
GetSecurityDescriptorLength
GetSecurityDescriptorControl
IsValidSecurityDescriptor
Sections
.text Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE