Static task
static1
Behavioral task
behavioral1
Sample
edfd499dfcdbd8d4bca97ca2969b723b64dae1fdcf7bd76c2cbd37494ff8b164.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edfd499dfcdbd8d4bca97ca2969b723b64dae1fdcf7bd76c2cbd37494ff8b164.exe
Resource
win10v2004-20220812-en
General
-
Target
edfd499dfcdbd8d4bca97ca2969b723b64dae1fdcf7bd76c2cbd37494ff8b164
-
Size
805KB
-
MD5
1c90b4c5fcb332590b5483c8cb4c9170
-
SHA1
e4105cc6919e4a8c15e1aa054369a2d8f0248784
-
SHA256
edfd499dfcdbd8d4bca97ca2969b723b64dae1fdcf7bd76c2cbd37494ff8b164
-
SHA512
4829ffd0dbb4c6778e09d4a405e9df58574da3601b5c9d670e632ab0127bbd0e8bd7a59085a2d21a4211a9fac617f60a180f7310538c1262b0301558e3bcbb31
-
SSDEEP
12288:3ObJUfjpZrylqMR8zQ6y0cEeulPrnlD7tlw9yh++d/WnkEWApjrHWD:0GXrylNRK5xHlrlD7tWyzkkEFV
Malware Config
Signatures
Files
-
edfd499dfcdbd8d4bca97ca2969b723b64dae1fdcf7bd76c2cbd37494ff8b164.exe windows x86
2ce48db2d639de60acbfedfe2db14116
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenEventW
CreateDirectoryA
GetVolumePathNameA
IsValidLocale
CreateFileW
AddAtomA
GetCurrentThreadId
GetModuleHandleA
InterlockedExchange
SetFileTime
GetModuleFileNameA
OpenMutexW
SetFilePointer
DeleteFileW
VirtualProtectEx
GlobalFlags
GetDriveTypeW
CreateFileW
lstrlenA
DeleteFileW
GetTickCount
HeapDestroy
GetFileAttributesW
PulseEvent
LeaveCriticalSection
user32
GetWindowLongA
GetWindowLongA
PeekMessageA
IsMenu
GetWindowTextA
DestroyIcon
DestroyMenu
wsprintfA
LoadCursorA
SetFocus
DispatchMessageA
SetRect
MessageBoxA
dmdskmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
?namecmp@@YGHPBG0@Z
advapi32
IsValidAcl
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 795KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE