Static task
static1
Behavioral task
behavioral1
Sample
0edc38542cb469890f2bbfc23af1da656e2eb13e81d84c8b8f21f2e4eddeec1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0edc38542cb469890f2bbfc23af1da656e2eb13e81d84c8b8f21f2e4eddeec1e.exe
Resource
win10v2004-20220901-en
General
-
Target
0edc38542cb469890f2bbfc23af1da656e2eb13e81d84c8b8f21f2e4eddeec1e
-
Size
1.2MB
-
MD5
3d7b527a23009869730248d9b82cf770
-
SHA1
1672e9f60cc785305361fb6ff735d368a905f3a6
-
SHA256
0edc38542cb469890f2bbfc23af1da656e2eb13e81d84c8b8f21f2e4eddeec1e
-
SHA512
9bb17673ea5764514f62e69762b0a379ec553e62b11c2625f3164947a4211a64972b3e11d08d0bda85a75a74951aa8b60849806971b4a4ece9ca9111c2b36ae8
-
SSDEEP
24576:4qb/hOVsKejj2WGYH2lCRVPvruTx/WVVye3a+YTcSWPWu9QW6L3IZDsn:X/hg/CRVlye3a+YTcSwtQW6LYVm
Malware Config
Signatures
Files
-
0edc38542cb469890f2bbfc23af1da656e2eb13e81d84c8b8f21f2e4eddeec1e.exe windows x86
bb8c752a2c4cdd6f1580d64ada2da98d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
MoveFileA
FlushFileBuffers
GetCPInfo
LCMapStringA
LCMapStringW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
CloseHandle
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
VirtualAlloc
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
SetStdHandle
GetFileAttributesA
CreateFileA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
GetLocaleInfoW
SetEndOfFile
CreateFileW
DeleteFileA
Sections
.text Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE