Static task
static1
Behavioral task
behavioral1
Sample
ed2ff12fd3ac65d501d21ac50e3c225e3558fe805747ff87385202eda65fbb7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed2ff12fd3ac65d501d21ac50e3c225e3558fe805747ff87385202eda65fbb7b.exe
Resource
win10v2004-20221111-en
General
-
Target
ed2ff12fd3ac65d501d21ac50e3c225e3558fe805747ff87385202eda65fbb7b
-
Size
91KB
-
MD5
2ee7c685105c682eaf5e5d583047f672
-
SHA1
cae14636d08ff9c5a0d837fd6445efd53bd8f343
-
SHA256
ed2ff12fd3ac65d501d21ac50e3c225e3558fe805747ff87385202eda65fbb7b
-
SHA512
84bb9c3d083a8e088dec2201cf527e606bec2298aae8faa9f151953df70c401a0e1e398f60c517d7b70b6bcbab1f831532a29c5f31638271c4b9c54fb4ee47c7
-
SSDEEP
1536:W8MywhxsaFTV8JAIRm8rdKFFlSAbgj510d8ShhZqEFGpVhF5A38l0CDe0Oygfp:W8P+jhuWISFxbaPoVqEqVhFO320C60zo
Malware Config
Signatures
Files
-
ed2ff12fd3ac65d501d21ac50e3c225e3558fe805747ff87385202eda65fbb7b.exe windows x86
2d353c7386ef08f42997a30959d90c8f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
WriteFile
ExitProcess
LoadLibraryA
CreateMailslotW
IsDBCSLeadByteEx
SetErrorMode
FormatMessageW
CreateMutexW
PostQueuedCompletionStatus
ExitThread
GetTimeFormatA
EnumResourceLanguagesA
OpenMutexW
GetModuleHandleA
VirtualFree
VirtualAlloc
InterlockedDecrement
OpenJobObjectW
ReplaceFileA
HeapCreate
FindClose
msvcrt
sin
_wtoi
_nextafter
_daylight
atoi
_CIatan2
_endthreadex
_ismbblead
abs
memset
_mbsstr
memcpy
_heapmin
strcat
comdlg32
dwLBSubclass
GetSaveFileNameA
ReplaceTextW
GetOpenFileNameA
LoadAlterBitmap
GetFileTitleW
FindTextW
ReplaceTextA
ReplaceTextW
FindTextA
PrintDlgW
dwOKSubclass
GetFileTitleA
CommDlgExtendedError
PrintDlgExW
winmm
midiOutGetNumDevs
waveOutMessage
mmioDescend
waveInGetDevCapsA
midiOutShortMsg
opengl32
glEnd
glColor4usv
glRasterPos3sv
glColor4fv
wglSwapBuffers
glRects
glRasterPos4fv
glCallList
glTexCoord1f
glColor4us
glGenLists
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ