Static task
static1
Behavioral task
behavioral1
Sample
bedeb9b93cb970ad30c4cbdfb214ec6d41c1d54f8f41e75c78f19ce160c63ffe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bedeb9b93cb970ad30c4cbdfb214ec6d41c1d54f8f41e75c78f19ce160c63ffe.exe
Resource
win10v2004-20220812-en
General
-
Target
bedeb9b93cb970ad30c4cbdfb214ec6d41c1d54f8f41e75c78f19ce160c63ffe
-
Size
432KB
-
MD5
abcb53d757609b1a9a843bbbf1c5c178
-
SHA1
aa21981dd512f80613bb26603e9b3f5780f57aa5
-
SHA256
bedeb9b93cb970ad30c4cbdfb214ec6d41c1d54f8f41e75c78f19ce160c63ffe
-
SHA512
d81e787cf2dfcca9607e9e1b13e84988a8263760264a80cc0ad4e1245d826642d4f9ac4484d93756f307123245f5580aeb367049da0c00d6f10807613c99d1fd
-
SSDEEP
12288:+Kqai/7l46iPtMpQGQWlvKrby7zRqb1XO9:+KqJO6uuZ1vKXyfRqZX
Malware Config
Signatures
Files
-
bedeb9b93cb970ad30c4cbdfb214ec6d41c1d54f8f41e75c78f19ce160c63ffe.exe windows x86
2caf52698aa1c1842137200342960682
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ZombifyActCtx
GetUserDefaultLangID
GetCommandLineW
user32
OpenIcon
GetProcessWindowStation
Sections
.text Size: 429KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE