Static task
static1
Behavioral task
behavioral1
Sample
ed922e9061699245c6f09897ca860ceff5aec2750da9ba73acb410ac3c16465f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ed922e9061699245c6f09897ca860ceff5aec2750da9ba73acb410ac3c16465f.exe
Resource
win10v2004-20221111-en
General
-
Target
ed922e9061699245c6f09897ca860ceff5aec2750da9ba73acb410ac3c16465f
-
Size
56KB
-
MD5
89ffb262ee96689c89e6434f6ad4b91c
-
SHA1
ef30e0fc90f8c77b4b721b9076621838ddfd0613
-
SHA256
ed922e9061699245c6f09897ca860ceff5aec2750da9ba73acb410ac3c16465f
-
SHA512
55af2f3809fb6652d3847a6be8d23690518dc18c68b5166034e2f53d47f5db78b2bb1cb2674f86075fdb927e3e73a8e1810ebdac60623df84d0aab62892a7b5f
-
SSDEEP
1536:UiXYCNtX8alfmOo3t8ZexuJghh2FizRYeF:UUYCnnod8Z/uhoEfF
Malware Config
Signatures
Files
-
ed922e9061699245c6f09897ca860ceff5aec2750da9ba73acb410ac3c16465f.exe windows x86
d8477fcf0c3f656fad6d7927f6187541
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstChangeNotificationW
LZOpenFileA
EnumSystemLocalesA
CreateMailslotA
GetCommandLineW
CreateThread
CreateWaitableTimerA
ExpungeConsoleCommandHistoryA
CopyLZFile
DebugActiveProcessStop
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE