Static task
static1
Behavioral task
behavioral1
Sample
edf3cc0ddc3a0a18fbcdaec88e7e3af2f258be698c7d925c536e3e52e4fcabec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edf3cc0ddc3a0a18fbcdaec88e7e3af2f258be698c7d925c536e3e52e4fcabec.exe
Resource
win10v2004-20220812-en
General
-
Target
edf3cc0ddc3a0a18fbcdaec88e7e3af2f258be698c7d925c536e3e52e4fcabec
-
Size
251KB
-
MD5
81b7194685e7eadf4ec04d47747e6740
-
SHA1
91e4fcbf84ed019734cac39758244f222178ff7d
-
SHA256
edf3cc0ddc3a0a18fbcdaec88e7e3af2f258be698c7d925c536e3e52e4fcabec
-
SHA512
10e16a37106436e5f344570875181eac3fa40964c20076081b6d788f90c378560a5840f0324b52d298b4663b0889a7437618ae968b4b6d8f5bb603affd5b850a
-
SSDEEP
6144:9nVrLMbj6mUJzap0A6U7X4EWJaRkjCeXra2AqEwTnxHi:Rs6miz+8EkaSOeXVAqEwTnJi
Malware Config
Signatures
Files
-
edf3cc0ddc3a0a18fbcdaec88e7e3af2f258be698c7d925c536e3e52e4fcabec.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.text Size: 81KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YYDYSDY Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE