Static task
static1
Behavioral task
behavioral1
Sample
edcd5b2e3da72b98558917f0e75a0626816be3221b105b34fb241034097a8b96.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
edcd5b2e3da72b98558917f0e75a0626816be3221b105b34fb241034097a8b96.exe
Resource
win10v2004-20220812-en
General
-
Target
edcd5b2e3da72b98558917f0e75a0626816be3221b105b34fb241034097a8b96
-
Size
107KB
-
MD5
5ff808f484cf0876de6edac80f1f7a57
-
SHA1
5f83e03e5ec7f996894ec93cb8c56a13c392f6db
-
SHA256
edcd5b2e3da72b98558917f0e75a0626816be3221b105b34fb241034097a8b96
-
SHA512
4781274dba85ef4b587512982f2fc44df2eeff20f3dc84c284b2b2c569d5d590036b1c9ae4aa2e0ca69778eda9be1bb15d9bc27336bdef9e3eb9e67dc71c6f10
-
SSDEEP
1536:vkk6l8Lb3UroLgpumji/WGTs0OKVqjIftgEa/rAlqRZg:v5JTUroLNqGTLNVqjJsSO
Malware Config
Signatures
Files
-
edcd5b2e3da72b98558917f0e75a0626816be3221b105b34fb241034097a8b96.exe windows x86
37a84cbdf7cd8d0b45d3397d3159060b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
WaitForMultipleObjects
GetCommandLineW
VirtualProtect
IsBadReadPtr
GetModuleFileNameW
WriteConsoleA
GetCurrentThread
IsBadCodePtr
InterlockedDecrement
CompareFileTime
GetModuleHandleA
DeleteFileA
GetThreadLocale
SystemTimeToFileTime
WritePrivateProfileStringA
EnumCalendarInfoA
LoadResource
GetStringTypeExA
SizeofResource
CreateDirectoryA
WideCharToMultiByte
IsDebuggerPresent
GetCurrentProcessId
IsDBCSLeadByte
GetFileTime
FileTimeToSystemTime
GetProcAddress
GetTempPathA
msvcrt
_exit
__p__fmode
__getmainargs
__set_app_type
_controlfp
tan
__p___initenv
_initterm
_XcptFilter
_adjust_fdiv
_except_handler3
__p__commode
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Epanawy Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ