Static task
static1
Behavioral task
behavioral1
Sample
1edb98c01390e24947eb7a1e0fb0d97d2037ae946b83c24a1915372ba4646aed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1edb98c01390e24947eb7a1e0fb0d97d2037ae946b83c24a1915372ba4646aed.exe
Resource
win10v2004-20220901-en
General
-
Target
1edb98c01390e24947eb7a1e0fb0d97d2037ae946b83c24a1915372ba4646aed
-
Size
92KB
-
MD5
00413f4b4fd443999030e3567e1f17ae
-
SHA1
914fbb17979449a1d2d34381f671a4679f3050dc
-
SHA256
1edb98c01390e24947eb7a1e0fb0d97d2037ae946b83c24a1915372ba4646aed
-
SHA512
575c0f0a638a1ee0e2ba4caf309fad91f2759cc9ace80cf806707df13ef1847ea7d651c679ddb23af44a53d6b6f1f59ea3bac199bf41fcff4bfea0ad97a6edf4
-
SSDEEP
1536:nC3YhIlhWW8EpvT9FWtYK8bXgwD94gBH+Ztdd+xc0XAGGXbS7z2VEDK:nC3YhYT3FSkx4SHo/+2PXbS9K
Malware Config
Signatures
Files
-
1edb98c01390e24947eb7a1e0fb0d97d2037ae946b83c24a1915372ba4646aed.exe windows x86
fac26b60989cdee2baed384fd0e40842
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetStringTypeW
CreateFileMappingA
Sleep
GetStringTypeExA
CreateProcessW
GetDateFormatA
GetTimeZoneInformation
SetUnhandledExceptionFilter
IsBadReadPtr
CopyFileA
SetFileAttributesW
GetProcessHeap
LoadLibraryW
GlobalFree
GetCommandLineA
GetModuleHandleA
GetCurrentProcess
SystemTimeToFileTime
CompareFileTime
GetStartupInfoW
InterlockedExchange
WritePrivateProfileStringA
LoadResource
GetThreadLocale
lstrcmpiW
lstrlenA
GetConsoleOutputCP
WaitForSingleObject
GetTickCount
GetTempPathA
GetModuleFileNameW
DeleteFileA
GetTempFileNameA
GetFileAttributesA
GetExitCodeProcess
VirtualProtect
CreateProcessA
SetFileAttributesA
lstrlenW
LCMapStringW
FreeEnvironmentStringsA
LocalAlloc
GetSystemInfo
IsBadCodePtr
InterlockedDecrement
GetCommandLineW
VirtualFree
msvcrt
__set_app_type
__getmainargs
__p__fmode
_exit
__p__commode
_controlfp
_adjust_fdiv
_initterm
_XcptFilter
_except_handler3
__p___initenv
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ