_46g9rg
Static task
static1
Behavioral task
behavioral1
Sample
ecff85b437890d2c3a057169c5459a486a147653e3c80e53169dccfd377faa8a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecff85b437890d2c3a057169c5459a486a147653e3c80e53169dccfd377faa8a.exe
Resource
win10v2004-20220812-en
General
-
Target
ecff85b437890d2c3a057169c5459a486a147653e3c80e53169dccfd377faa8a
-
Size
218KB
-
MD5
bacadff0c965413a260f6f42d410cf05
-
SHA1
781f17fd5d44c9f023d566450cd2150069f860c2
-
SHA256
ecff85b437890d2c3a057169c5459a486a147653e3c80e53169dccfd377faa8a
-
SHA512
69e428f74f3a661f3d01acc25bdb65bafce0d593f62ac6411d337388a02d525f2327dd0d758671b91674ea3cebf406f826797729b77b7b935777e3027e4221b2
-
SSDEEP
3072:3ZlipqpiXGGb1PqduFWcHwpoFm2KI1swNjcw0ZQhrcDWDOFxF1Oc:3zqA6jqso7oFmrI15NjOeMZFxF
Malware Config
Signatures
Files
-
ecff85b437890d2c3a057169c5459a486a147653e3c80e53169dccfd377faa8a.exe windows x86
8c13f8e808de9bd7e2d1c4e05e9504e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
FindTextA
kernel32
GetDiskFreeSpaceA
GetCPInfo
GetTempPathA
VirtualAlloc
GetModuleHandleA
MoveFileExA
LoadLibraryExA
GetCommandLineW
lstrcpynA
GetProcAddress
SetEndOfFile
lstrcatA
GlobalAddAtomA
SetHandleCount
GetStringTypeW
GetModuleFileNameA
CreateThread
CompareStringA
IsBadHugeReadPtr
GlobalDeleteAtom
GetSystemDefaultLangID
FindClose
MulDiv
lstrcmpiA
LocalAlloc
GetVersion
Sleep
GetTickCount
WriteFile
WaitForSingleObject
GetThreadLocale
GetCommandLineA
LockResource
GetCurrentThreadId
GetCurrentThread
EnumCalendarInfoA
FormatMessageA
LocalReAlloc
MoveFileA
GlobalAlloc
GlobalFindAtomA
SetEvent
GetEnvironmentStrings
LoadResource
GetVersionExA
ExitProcess
LoadLibraryA
LocalFree
ReadFile
GetFileAttributesA
SizeofResource
HeapDestroy
InitializeCriticalSection
lstrlenW
FindFirstFileA
user32
GetWindowThreadProcessId
GetMenu
InsertMenuItemA
GetSysColorBrush
IsWindowEnabled
GetWindowTextA
oleaut32
SafeArrayUnaccessData
SafeArrayCreate
VariantChangeType
Exports
Exports
Sections
CODE Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.apdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ