Static task
static1
Behavioral task
behavioral1
Sample
ecf6bf02b64ada982acdaf40009696780db2e6bfea340957d15d033632e81dec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ecf6bf02b64ada982acdaf40009696780db2e6bfea340957d15d033632e81dec.exe
Resource
win10v2004-20220812-en
General
-
Target
ecf6bf02b64ada982acdaf40009696780db2e6bfea340957d15d033632e81dec
-
Size
48KB
-
MD5
9fbd1d5e3a872663c5fe78a550d3b84e
-
SHA1
c4945af201e0ee01d19b66f76bf145a3ef0c235e
-
SHA256
ecf6bf02b64ada982acdaf40009696780db2e6bfea340957d15d033632e81dec
-
SHA512
66ce040e5d1ec9213a5a49bbdcc6d26c7c1a5cc3730e988dd1558d303e4960f8c2741b8028dfc3a0307ca0cfdd04447ce2d35c77fb624f9d0d8d66065910d4aa
-
SSDEEP
768:Ld3/rzuOGVbrXXNVjpcy9evsVpzEesPMRLC2ZayWasuNQH7LEoHgh4YNFNGuCMD:LZryXdoJsrzxv9/7WaskSEoApWuC
Malware Config
Signatures
Files
-
ecf6bf02b64ada982acdaf40009696780db2e6bfea340957d15d033632e81dec.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 30KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ