Static task
static1
Behavioral task
behavioral1
Sample
ed17c2278418913c153685eef2bddea89a14f889df0296b79bba0bc09ab256fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed17c2278418913c153685eef2bddea89a14f889df0296b79bba0bc09ab256fc.exe
Resource
win10v2004-20220812-en
General
-
Target
ed17c2278418913c153685eef2bddea89a14f889df0296b79bba0bc09ab256fc
-
Size
812KB
-
MD5
b034cd2c99850ab659a8baceb11261e8
-
SHA1
876e7caa04ab55f37200c32c7263e2ad5cd5c08e
-
SHA256
ed17c2278418913c153685eef2bddea89a14f889df0296b79bba0bc09ab256fc
-
SHA512
46dc34a60aa6f53a606069db9cd4f574bcb2c3486c1386a76c554eac15f013647f3dc8591528da783ecb90be41216dc52816af792397274c53b600c2dc58e8e1
-
SSDEEP
12288:ziyyaiQP9xLfe4HX+x21qMzNT4eXnMb9F12+qnZIui9Gx9Kio0GJtaMZ7SIev:zLiSXL2Gn1qkNT48nMb3gyGbnGf9SI
Malware Config
Signatures
Files
-
ed17c2278418913c153685eef2bddea89a14f889df0296b79bba0bc09ab256fc.exe windows x86
ff171164d28928bc1d77a5831eef1cad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVersion
GetLogicalDrives
GetStringTypeA
GetLogicalDrives
GetLogicalDrives
GetLogicalDrives
GetFileAttributesA
VirtualProtect
OpenMutexW
GetStdHandle
lstrcpyW
GetLogicalDriveStringsW
GetLogicalDrives
CreateEventA
LoadLibraryA
SetCurrentDirectoryW
scrrun
DllUnregisterServer
DoOpenPipeStream
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ydata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 802KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ