?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
ed231373ddcdc253d4649b6df11ba399c5b90b8e67ff13f220c9ac765ee910d2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ed231373ddcdc253d4649b6df11ba399c5b90b8e67ff13f220c9ac765ee910d2.exe
Resource
win10v2004-20220812-en
General
-
Target
ed231373ddcdc253d4649b6df11ba399c5b90b8e67ff13f220c9ac765ee910d2
-
Size
163KB
-
MD5
2646f64dd7ada89a05f2c01fc8b9d3dd
-
SHA1
3e806c3661b98993c3059f3d3d9dc88aea801fa7
-
SHA256
ed231373ddcdc253d4649b6df11ba399c5b90b8e67ff13f220c9ac765ee910d2
-
SHA512
26181fb43d1ab282f21d20abdca5dcfe4a6c1109c09f7d4b37c94b6014769d354bf66dc5e12589cd4ff7ebbb60024f7c6ebf7aa71c79df849bbcb4de521cbcb2
-
SSDEEP
3072:LgBEF5W9huAMKz4NoARm+Zr8K63EkywgHzNvpPbogEs1Wqd3:LgBoW9kA9UNoARbhpkyPFh1WI
Malware Config
Signatures
Files
-
ed231373ddcdc253d4649b6df11ba399c5b90b8e67ff13f220c9ac765ee910d2.exe windows x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ