Static task
static1
Behavioral task
behavioral1
Sample
1edcb1714d6d0f6c570c8625acd18f8969bb3491d8ba7eed075046236e2f8d42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1edcb1714d6d0f6c570c8625acd18f8969bb3491d8ba7eed075046236e2f8d42.exe
Resource
win10v2004-20220812-en
General
-
Target
1edcb1714d6d0f6c570c8625acd18f8969bb3491d8ba7eed075046236e2f8d42
-
Size
79KB
-
MD5
6cb115d50d42a60e2f9116ece3e20150
-
SHA1
23f05ce99e480ea553dacb50c81dce61dd6c7985
-
SHA256
1edcb1714d6d0f6c570c8625acd18f8969bb3491d8ba7eed075046236e2f8d42
-
SHA512
c8ee846a9d055cdd08312918514aca6dc95c803d55cccffa5217cc43923929986515961c73deae04843d29bf00727822de2f44bd10a81d775d190e59ebdc4f1f
-
SSDEEP
1536:FloKQ98DqUCp54q4UBXMX3IMW4GEAJEBkCm9AlSchPKh:/LQ9WqHrMIMfGfJW7l1h
Malware Config
Signatures
Files
-
1edcb1714d6d0f6c570c8625acd18f8969bb3491d8ba7eed075046236e2f8d42.exe windows x86
20c9f9feccab11d8924a4babc953e5f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
FindClose
IsValidCodePage
IsBadWritePtr
GetLocaleInfoA
GetFileAttributesA
GetProcessHeap
RemoveDirectoryA
SetLastError
GetFileAttributesA
GetTickCount
TlsGetValue
MapViewOfFile
VirtualProtect
GetModuleHandleA
GetStringTypeA
HeapSize
CreateDirectoryA
ResetEvent
GetDriveTypeW
GetExitCodeThread
user32
GetWindowLongW
SetCursor
IsDialogMessageA
wsprintfW
LoadCursorA
LoadImageW
GetWindowTextW
DispatchMessageA
IsWindow
SetFocus
GetCapture
PeekMessageA
PostMessageW
msaatext
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE