Static task
static1
Behavioral task
behavioral1
Sample
ed6112515511d5a4714e5711694ed43b7dc1f230b8f8acdc0b60dc23e3ef8476.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed6112515511d5a4714e5711694ed43b7dc1f230b8f8acdc0b60dc23e3ef8476.exe
Resource
win10v2004-20220812-en
General
-
Target
ed6112515511d5a4714e5711694ed43b7dc1f230b8f8acdc0b60dc23e3ef8476
-
Size
240KB
-
MD5
0b36c3e58480120a9ba84b87136e7ebb
-
SHA1
0b74fbcf829f50fc4ac6eee030668687f0281133
-
SHA256
ed6112515511d5a4714e5711694ed43b7dc1f230b8f8acdc0b60dc23e3ef8476
-
SHA512
2cf33b274b1c9b90cb5bbc25bd812bce22e0696d1a722eb389f146b214273c8eda1a2a2f3bc89e44106c0b8b69eaad1d9903bbb920b161e1db82dba0c9aa57ba
-
SSDEEP
6144:LUDtj45LX2m2LApwVOS5oZ4p6vXpnBetT4rgF99hN:92m4o2OSSyp6zetc0F9
Malware Config
Signatures
Files
-
ed6112515511d5a4714e5711694ed43b7dc1f230b8f8acdc0b60dc23e3ef8476.exe windows x86
75a54da932f5b5efb55375e12ac1cacb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetSystemInfo
shlwapi
PathCompactPathA
PathBuildRootA
PathIsPrefixA
StrFormatByteSizeW
PathMakeSystemFolderA
PathIsDirectoryW
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ