Static task
static1
Behavioral task
behavioral1
Sample
ebc1ecf2d96f3c88a19571e5ec7a4e86a2fd5b646a8c1c53a43a8c6a691030b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ebc1ecf2d96f3c88a19571e5ec7a4e86a2fd5b646a8c1c53a43a8c6a691030b3.exe
Resource
win10v2004-20221111-en
General
-
Target
ebc1ecf2d96f3c88a19571e5ec7a4e86a2fd5b646a8c1c53a43a8c6a691030b3
-
Size
64KB
-
MD5
2ef1ae5f4226bee2fe7e834ae9c5b877
-
SHA1
17b11842a5330444084fa41d77c678679337e42f
-
SHA256
ebc1ecf2d96f3c88a19571e5ec7a4e86a2fd5b646a8c1c53a43a8c6a691030b3
-
SHA512
db531aab1d67c4d1c2b3e13db5e973ae34e0c676cb31824141cd8bf92ecff3c8ed84e80a9f83c40849613310d4c3b5d165acc89166b9a85fcc104bb08de90a3d
-
SSDEEP
1536:OJ/FCEdgHS7TW/MxJ2XmkpgT7x3aHysWY48VzAMDPsHHiDE2:GQ+gHgWw2Wiy7kHysbVXFDE2
Malware Config
Signatures
Files
-
ebc1ecf2d96f3c88a19571e5ec7a4e86a2fd5b646a8c1c53a43a8c6a691030b3.exe windows x86
ce99156ac5e10bb027a7268dac451e3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
FindFirstFileW
GetOEMCP
HeapAlloc
GetStartupInfoA
GetEnvironmentStrings
HeapDestroy
SetStdHandle
EnterCriticalSection
VirtualProtect
GetACP
GetVersionExW
SetConsoleCP
InterlockedCompareExchange
GetCommandLineA
GlobalAlloc
ExitProcess
OutputDebugStringA
rpcrt4
I_RpcClearMutex
user32
ShowWindow
PostMessageA
version
GetFileVersionInfoA
advapi32
RegQueryValueExA
gdi32
CombineRgn
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 874B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE