Static task
static1
Behavioral task
behavioral1
Sample
ec92d6c366be62800c6ed2f2599257be1c9a6625fdc554f309526f044443ffbc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ec92d6c366be62800c6ed2f2599257be1c9a6625fdc554f309526f044443ffbc.exe
Resource
win10v2004-20220812-en
General
-
Target
ec92d6c366be62800c6ed2f2599257be1c9a6625fdc554f309526f044443ffbc
-
Size
76KB
-
MD5
327f06011409d0bed9eec96c9f4e8e0a
-
SHA1
fa62601971d71c4b113697b68f1b72e674d14cb1
-
SHA256
ec92d6c366be62800c6ed2f2599257be1c9a6625fdc554f309526f044443ffbc
-
SHA512
22861894539667ea05831d7a7d30cb83f4d4d30486b201c584d4f41ebe5b9daa39f2db5cf71872bca5f761377c2c471fa66e26699c72ca00ccf03e11be4c8ed5
-
SSDEEP
1536:YmmE0VDJ37MLp7rUMhePYFnToIfMIOeqmmmfAeN513iMFCvJgZP1aIU:YF9QN7rUMhePYtTBfCeqm9f3b13CEPgI
Malware Config
Signatures
Files
-
ec92d6c366be62800c6ed2f2599257be1c9a6625fdc554f309526f044443ffbc.exe windows x86
18ecfb14084c700a0425f7818c78cecb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc71u
ord3327
ord757
ord764
ord1049
ord3824
ord1079
ord4255
ord4320
ord2009
ord1007
ord5096
ord566
ord577
ord280
ord870
ord1479
ord2895
ord6111
ord282
ord2926
ord1118
ord774
ord5524
ord3990
ord5484
ord283
ord5971
ord1198
ord5558
ord1472
ord899
ord4475
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2832
ord2708
ord4301
ord2829
ord2725
ord2531
ord5562
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord3800
ord5579
ord2054
ord6274
ord3795
ord6272
ord4008
ord4032
ord3677
ord4535
msvcr71
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_controlfp
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
memset
__dllonexit
free
_CxxThrowException
_waccess
__security_error_handler
__set_app_type
__p__fmode
wcsstr
__p__commode
__CxxFrameHandler
_adjust_fdiv
__setusermatherr
_except_handler3
_initterm
kernel32
Process32NextW
CloseHandle
Process32FirstW
CreateToolhelp32Snapshot
CreateProcessW
Sleep
MoveFileExW
GetWindowsDirectoryW
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetStartupInfoW
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
comctl32
ord17
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ