Static task
static1
Behavioral task
behavioral1
Sample
edb0f0e1d816d26ded2993a8d8c031d8ec6c476d3c6d7ccfcc38822d39d6359d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edb0f0e1d816d26ded2993a8d8c031d8ec6c476d3c6d7ccfcc38822d39d6359d.exe
Resource
win10v2004-20220901-en
General
-
Target
edb0f0e1d816d26ded2993a8d8c031d8ec6c476d3c6d7ccfcc38822d39d6359d
-
Size
823KB
-
MD5
5cf644ff1f5cc4717f97b979ccae8d60
-
SHA1
3a5cce0842d194e657e32a19829d88491255ef48
-
SHA256
edb0f0e1d816d26ded2993a8d8c031d8ec6c476d3c6d7ccfcc38822d39d6359d
-
SHA512
fcd54c893f2b873c3be75c3f8cdc50e99c26a4ee7d3b286f8396ac344234127cbc860e939e5704f3beaf01fe58353f4e38b2429deaf75fc2216d177ac5a0f2e5
-
SSDEEP
12288:Tt/cgPdioTRl92dkK1gzMQK2b7QkzhGPuH/mgZ6FO4ilduZIWouBJSg6T:Tt/cArD9+kRK2HnhGGv2ild2IWwg
Malware Config
Signatures
Files
-
edb0f0e1d816d26ded2993a8d8c031d8ec6c476d3c6d7ccfcc38822d39d6359d.exe windows x86
d6f10dd5a1ad6025124d405732964485
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetVolumeInformationA
HeapFree
GetDiskFreeSpaceA
WriteConsoleA
FindFirstFileA
SetLastError
OpenEventA
CreateSemaphoreW
GetStringTypeA
GetEnvironmentVariableW
HeapCreate
GetTimeFormatW
FindResourceW
lstrlenA
GetCurrentDirectoryW
lstrcatA
GetShortPathNameA
GetPrivateProfileIntA
inetcomm
EssContentHintDecodeEx
EssContentHintEncodeEx
HrFreeAttachData
HrGetAttachIcon
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ