Static task
static1
Behavioral task
behavioral1
Sample
ecc0e4935d9346f442f74ffbbb9adaf803d8da42e6374369e254ed508d1542bd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecc0e4935d9346f442f74ffbbb9adaf803d8da42e6374369e254ed508d1542bd.exe
Resource
win10v2004-20221111-en
General
-
Target
ecc0e4935d9346f442f74ffbbb9adaf803d8da42e6374369e254ed508d1542bd
-
Size
5.5MB
-
MD5
0c9d73ffeb0293b550580c4480e19933
-
SHA1
7880402911eb294d508681b7c8d51e1c94f482a9
-
SHA256
ecc0e4935d9346f442f74ffbbb9adaf803d8da42e6374369e254ed508d1542bd
-
SHA512
3542370f8314315ad1c76454530fa06d510e183fcdd068f350f22921beb6014b64ddac24c6a07523cc0bc8296a25e250daad1cab00005072a6d76d65a710e76f
-
SSDEEP
98304:AK70sXPIdFs+53HeMOLarLGe5fj9j1oINZs4LWAkMHrohzkpN:Ak0sXQj3JecJ5xj1oIPh7kMLczkpN
Malware Config
Signatures
Files
-
ecc0e4935d9346f442f74ffbbb9adaf803d8da42e6374369e254ed508d1542bd.exe windows x86
6d67a7f36566b3fc1826595145bbca88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
TerminateProcess
user32
PostQuitMessage
gdi32
LineTo
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
shell32
SHGetPathFromIDListA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_GetIcon
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
__dllonexit
psapi
GetMappedFileNameW
Sections
.text Size: 3.0MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ