Static task
static1
Behavioral task
behavioral1
Sample
cedffe4705ee8760f329d575ad21397f55007fc10ff04eacc84f00ead84fbecd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cedffe4705ee8760f329d575ad21397f55007fc10ff04eacc84f00ead84fbecd.exe
Resource
win10v2004-20220812-en
General
-
Target
cedffe4705ee8760f329d575ad21397f55007fc10ff04eacc84f00ead84fbecd
-
Size
320KB
-
MD5
a3b436c690c961d327d014080d2ee6c0
-
SHA1
5ea52fb892112d0055c30876e5aa2d44d62fba2d
-
SHA256
cedffe4705ee8760f329d575ad21397f55007fc10ff04eacc84f00ead84fbecd
-
SHA512
6848b883288a45f9e9ef661cff27c85edf7601e3fb9510386983e821c298e90c0a51b30ad542d371eb870f49024ed0ea6db359068699fb87e506bdb3735446e2
-
SSDEEP
6144:mA1VaEaPyNMEOZsH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:T0PN62EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
cedffe4705ee8760f329d575ad21397f55007fc10ff04eacc84f00ead84fbecd.exe windows x86
a25d3831a1417688858bd1ea5e8f5c65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleDisplayMode
VDMOperationStarted
FindActCtxSectionStringW
IsWow64Process
SetConsoleCursorPosition
SetThreadExecutionState
GetCurrencyFormatA
GetLastError
ClearCommError
lstrcmp
WritePrivateProfileStringW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE