?BreadA@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
9ed17773d92a546d7ee08c8e0431625243a3d05a72edebd8b39ebdbc8396792d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ed17773d92a546d7ee08c8e0431625243a3d05a72edebd8b39ebdbc8396792d.exe
Resource
win10v2004-20220812-en
General
-
Target
9ed17773d92a546d7ee08c8e0431625243a3d05a72edebd8b39ebdbc8396792d
-
Size
155KB
-
MD5
230ec48af283ce53696e63f737a98b70
-
SHA1
d918bf1bf6bf14e91a1abb93d6cbb433d4bf1fe5
-
SHA256
9ed17773d92a546d7ee08c8e0431625243a3d05a72edebd8b39ebdbc8396792d
-
SHA512
bb4e80584a519de7500d1d0c57f46174d1d1885f07cf24ab4d473ec231aae7297c2f0d55afb2c8e9a63ae4dcb2e44aa3bd99bf1669739acad7f13fe91a9a0545
-
SSDEEP
3072:QBnJ5GbedcA1nQpb21buZuOc4sBGVhrDkuHQm6k5D5Pg6:QBnJ5Q0ciQpb21buM46EXxwm6k
Malware Config
Signatures
Files
-
9ed17773d92a546d7ee08c8e0431625243a3d05a72edebd8b39ebdbc8396792d.exe windows x86
d2e944b3a9f0312c0b1a443f09af3b64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
GetSaveFileNameW
kernel32
ConnectNamedPipe
ReadFile
GlobalCompact
GlobalDeleteAtom
TryEnterCriticalSection
IsValidLanguageGroup
InitializeCriticalSection
EnumResourceLanguagesA
LocalUnlock
lstrcpyW
GetAtomNameW
FlushFileBuffers
GetSystemWindowsDirectoryA
GlobalAddAtomW
OpenFileMappingA
GetTimeZoneInformation
GetFileAttributesExA
OpenFileMappingW
GlobalLock
GetCurrentDirectoryW
FindResourceExW
SetSystemTimeAdjustment
GetLocaleInfoA
RtlUnwind
GetWindowsDirectoryW
user32
GetActiveWindow
InvalidateRgn
IsCharUpperW
GetDesktopWindow
GetForegroundWindow
Exports
Exports
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ