Static task
static1
Behavioral task
behavioral1
Sample
ed4925f9cbda2ffdce84676d302a76e734bae35450c8009ae7095ee6b68c2afd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ed4925f9cbda2ffdce84676d302a76e734bae35450c8009ae7095ee6b68c2afd.exe
Resource
win10v2004-20220812-en
General
-
Target
ed4925f9cbda2ffdce84676d302a76e734bae35450c8009ae7095ee6b68c2afd
-
Size
104KB
-
MD5
8435d9f0dba9b1e0d1c8feb9bd718205
-
SHA1
87f9978bd14f07723424f1128a37bbfab533a561
-
SHA256
ed4925f9cbda2ffdce84676d302a76e734bae35450c8009ae7095ee6b68c2afd
-
SHA512
46a83f4489bd065a52e28475a42e89273ebb2048fb4a41ac302836a5a6c7923e78ab6ae879d137d5d2c043939dccda0617f1a0b4f63bae8d4743cdd426b26469
-
SSDEEP
1536:EdQg+dV9A7yunVPwpuq0bn7zZokBFV9SKOZ6yScU3XymY1iCO4:Ed8NAmyBBbxokPV91a+N3Q5
Malware Config
Signatures
Files
-
ed4925f9cbda2ffdce84676d302a76e734bae35450c8009ae7095ee6b68c2afd.exe windows x86
200b20b272dfd9e28da37a4e66562534
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetCurrentThread
DeleteFileA
WaitForMultipleObjects
GetTempPathA
VirtualProtect
LoadResource
RtlMoveMemory
GetProcAddress
GetLocaleInfoW
SizeofResource
DuplicateHandle
SetCurrentDirectoryA
lstrcatA
lstrlenA
GetModuleFileNameA
lstrlenW
TerminateProcess
GetThreadLocale
GetTickCount
MulDiv
LocalFree
GetStartupInfoA
SystemTimeToFileTime
GetWindowsDirectoryA
GetSystemTime
GetCPInfo
GetDriveTypeA
FreeEnvironmentStringsA
GetModuleHandleA
GetVersionExW
msvcrt
__p__fmode
__p___initenv
_except_handler3
__p__commode
_adjust_fdiv
_XcptFilter
__getmainargs
_initterm
_controlfp
tan
__set_app_type
_exit
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Roar Je Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ