Static task
static1
Behavioral task
behavioral1
Sample
ed946374a233a2fbf7d513f7bb08c446d5cd53c40eeeec00ef4174281e616d98.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed946374a233a2fbf7d513f7bb08c446d5cd53c40eeeec00ef4174281e616d98.exe
Resource
win10v2004-20220812-en
General
-
Target
ed946374a233a2fbf7d513f7bb08c446d5cd53c40eeeec00ef4174281e616d98
-
Size
37KB
-
MD5
fe39d2de0fa33e9b0000d44fb5e5ed8a
-
SHA1
734a42b5812242b8048fb7c0b78482d4e180f61d
-
SHA256
ed946374a233a2fbf7d513f7bb08c446d5cd53c40eeeec00ef4174281e616d98
-
SHA512
0696ea7273a70557623b80138ef5922c5ee238f7814472b8daf809cf5c29cb539e56231d6043b0463ec0dbe0d8242ae417c777d2b3fceffc65240558c17e5f58
-
SSDEEP
768:iiXKxIHArdWbukRQD2AXKS12o1F4oBfTsPvvnw0Q:lwjkRQD2AXP12o1nInvw0
Malware Config
Signatures
Files
-
ed946374a233a2fbf7d513f7bb08c446d5cd53c40eeeec00ef4174281e616d98.exe windows x86
1199dedc3de863adc3dfccd5a32051b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
ShowWindow
SetTimer
RegisterClassExA
PostQuitMessage
LoadImageA
UpdateWindow
LoadCursorA
KillTimer
GetMessageA
GetClientRect
EndPaint
DispatchMessageA
LoadIconA
DefWindowProcA
CreateWindowExA
BeginPaint
gdi32
SelectObject
GetObjectA
DeleteDC
CreateCompatibleDC
BitBlt
kernel32
SleepEx
OpenProcess
LoadLibraryA
GetModuleHandleA
GetCurrentProcessId
GetCommandLineA
VirtualAlloc
FindFirstFileA
FindClose
ExitProcess
DeleteFileA
CreateThread
VirtualFree
FindNextFileA
shlwapi
StrStrIA
psapi
GetModuleFileNameExA
EnumProcessModules
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 405B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ