Static task
static1
Behavioral task
behavioral1
Sample
edaab58da2b0e300607c18dfe1cb6ffbc47ebcd6e08249277db276de793eaa3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edaab58da2b0e300607c18dfe1cb6ffbc47ebcd6e08249277db276de793eaa3c.exe
Resource
win10v2004-20221111-en
General
-
Target
edaab58da2b0e300607c18dfe1cb6ffbc47ebcd6e08249277db276de793eaa3c
-
Size
71KB
-
MD5
5594bf898386baeb2c68a18ef5cc41a6
-
SHA1
0041515808f11595668d0fcab08a1d9ae70ed176
-
SHA256
edaab58da2b0e300607c18dfe1cb6ffbc47ebcd6e08249277db276de793eaa3c
-
SHA512
1d6e8e65561291b3b3b028c8cd6c6bc4b9b4c7240d61c18adaa8d46836bb8137fb6c50d148df2defd4acfb266d54e095984ebb96b4d1032f3d28d016a23e257c
-
SSDEEP
1536:RyQrgzeQjAtAkOwel482sJRhokrA7HRpP3pvVsnH3q2eItOAP0B9mVWeOrMuwoWl:eUXqLmj35EaOh/2bHezWG
Malware Config
Signatures
Files
-
edaab58da2b0e300607c18dfe1cb6ffbc47ebcd6e08249277db276de793eaa3c.exe windows x86
8243a4cca1f63529071a54aa1a79eefc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomW
FindVolumeClose
LoadLibraryA
AddConsoleAliasW
MoveFileW
HeapExtend
SetConsoleLocalEUDC
GetComputerNameExA
TerminateThread
CreateMailslotW
ExitThread
SetThreadAffinityMask
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE