Behavioral task
behavioral1
Sample
5ec09ea381c11f48a6933f93330eee61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ec09ea381c11f48a6933f93330eee61.exe
Resource
win10v2004-20221111-en
General
-
Target
5ec09ea381c11f48a6933f93330eee61.exe
-
Size
3.0MB
-
MD5
5ec09ea381c11f48a6933f93330eee61
-
SHA1
e869b5a3e6c55c59d75036f3a7e54fb99fa44b91
-
SHA256
42c2461aa46a25c45f7efbb0babaa3f6fcef2bc4baff143574463117a9e7dc06
-
SHA512
aa0e3638f9c81febeedc001f19499fffc494e3da386e103ba4e8769e48ab2ff7c3730fc6a477429823f9155bf288bb5869a14a245f632f204b1ec9b50d3422e3
-
SSDEEP
49152:H0GMTzdS7FuoqqWMaZXwVCJk7UPjoPovQcZAmkzxCK5e:UGMTD7o+1gde
Malware Config
Signatures
-
Laplas family
Files
-
5ec09ea381c11f48a6933f93330eee61.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 211KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ