Static task
static1
Behavioral task
behavioral1
Sample
ed3f4f83783655c3076c40855649c2207dc94d3ca25f742f4474bac6b393625e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed3f4f83783655c3076c40855649c2207dc94d3ca25f742f4474bac6b393625e.exe
Resource
win10v2004-20220812-en
General
-
Target
ed3f4f83783655c3076c40855649c2207dc94d3ca25f742f4474bac6b393625e
-
Size
320KB
-
MD5
a1d98feb69405ac1271610a688c12b30
-
SHA1
9bdcc05489523a2b92b3d1d56d44d409a59eb147
-
SHA256
ed3f4f83783655c3076c40855649c2207dc94d3ca25f742f4474bac6b393625e
-
SHA512
1d36cbec671ea51d6e888305b588b0597112ad48de376f703ba6fb4a6198ad784781a5b5361de352bf7b57e3e91b91c576bfb87e9b17d76fcc1f1190f0374f35
-
SSDEEP
6144:NSaBPyjt15H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Aayx2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
ed3f4f83783655c3076c40855649c2207dc94d3ca25f742f4474bac6b393625e.exe windows x86
abd4cfffacbf86785f9dbaf948942ffc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
OutputDebugStringA
GetConsoleProcessList
GetProcessShutdownParameters
CreateMailslotW
WritePrivateProfileSectionA
BaseCheckAppcompatCache
DeleteVolumeMountPointW
lstrcpy
SetConsoleWindowInfo
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE