Static task
static1
Behavioral task
behavioral1
Sample
edc5fc9ed645ceebbf698300108d0191fbcc2a99953967a27a7c650dbdbc86fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edc5fc9ed645ceebbf698300108d0191fbcc2a99953967a27a7c650dbdbc86fc.exe
Resource
win10v2004-20220901-en
General
-
Target
edc5fc9ed645ceebbf698300108d0191fbcc2a99953967a27a7c650dbdbc86fc
-
Size
644KB
-
MD5
962a7b4c6c99a9d9ffef7722e96667df
-
SHA1
3171e0ee75a87ccb66d9f0e9b01bd5009ba5159b
-
SHA256
edc5fc9ed645ceebbf698300108d0191fbcc2a99953967a27a7c650dbdbc86fc
-
SHA512
28eb2be603f41c91d1d61f68131abd9d087f6aeb367947d094915424e313d629afe6d202b58c3513e0ea033a4d09eda655287344a25efedec1d4c6af8a47c94f
-
SSDEEP
12288:RXdUjFcqLXR0bZZ9PlMvXmdZT8US80bApD0qIcrV:RNqc3ZPlOm8UL0bApDlIQV
Malware Config
Signatures
Files
-
edc5fc9ed645ceebbf698300108d0191fbcc2a99953967a27a7c650dbdbc86fc.exe windows x86
f134dc02bddd5a4909e74abeb6ef7d24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetCurrentThread
GetCommandLineA
GetTickCount
GetLastError
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
ExitProcess
VirtualAlloc
GetOEMCP
Sleep
WriteFile
UnmapViewOfFile
InterlockedExchange
GetModuleHandleW
CloseHandle
ReadFile
RaiseException
InterlockedCompareExchange
LockResource
SizeofResource
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GlobalFree
HeapCreate
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
DuplicateHandle
FindFirstFileW
FindFirstFileA
CompareStringW
GetProcAddress
DeleteFileW
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
LeaveCriticalSection
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
MulDiv
CreateThread
SetFilePointer
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
LocalFree
FreeLibrary
GetStringTypeW
HeapReAlloc
GetExitCodeProcess
GetSystemTimeAsFileTime
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
SetStdHandle
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
HeapDestroy
WaitForSingleObject
GetFileAttributesA
GetStdHandle
user32
IsWindowVisible
SystemParametersInfoA
EndDialog
TrackPopupMenu
ScreenToClient
GetDlgItem
CheckMenuItem
SetWindowTextA
GetWindowRect
GetSystemMetrics
FillRect
CreateWindowExA
GetSubMenu
EnableMenuItem
SetForegroundWindow
LoadStringA
ShowWindow
UpdateWindow
GetParent
DestroyWindow
ClientToScreen
GetClientRect
SendMessageA
UnregisterClassA
GetCursorPos
GetDC
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
MoveWindow
Sections
.text Size: 596KB - Virtual size: 922KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ