Static task
static1
Behavioral task
behavioral1
Sample
00ed7ad64c326bfde99fbddabde3e6747b6f04bc8b590e1f1cc0396981e4697c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00ed7ad64c326bfde99fbddabde3e6747b6f04bc8b590e1f1cc0396981e4697c.exe
Resource
win10v2004-20220812-en
General
-
Target
00ed7ad64c326bfde99fbddabde3e6747b6f04bc8b590e1f1cc0396981e4697c
-
Size
1.2MB
-
MD5
9d011d6abc3b8ee458003a90286fa0de
-
SHA1
17f14b4b33dd83991e8c9019c9a0dba691d74d5e
-
SHA256
00ed7ad64c326bfde99fbddabde3e6747b6f04bc8b590e1f1cc0396981e4697c
-
SHA512
fd19f8dfa5f05cfdd366979eec1b1113da94c3fa8b53ffc7546ff31d75857ccf117ac24e157fab39c9ced51a73bcf7b311c55dfd57a52e98cb1f98575a06b827
-
SSDEEP
24576:xiYOR5VyYpJ2DjTkRQgFqxSRVQfbT5GZpWC9P43wSlKOlMrrU/S1Ou8S:kYW27kRV+SRVM5KV9PIwSl1l6OS1f
Malware Config
Signatures
Files
-
00ed7ad64c326bfde99fbddabde3e6747b6f04bc8b590e1f1cc0396981e4697c.exe windows x86
9f0a8ac35758a78d1a066ef1c6e16ff0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
msimg32
TransparentBlt
ole32
CoTaskMemFree
olepro32
OleCreatePropertyFrame
comctl32
ImageList_SetIconSize
imm32
ImmGetVirtualKey
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
comdlg32
ChooseFontA
winmm
timeGetTime
wsock32
WSACleanup
avifil32
AVISaveOptionsFree
msvfw32
DrawDibRealize
gdiplus
GdipDrawImageRectRect
Sections
CODE Size: 1.1MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE