Static task
static1
Behavioral task
behavioral1
Sample
ed201cfca808241815d2bc6706e7dbd5321eb4713e91885666c5a3205d87160a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed201cfca808241815d2bc6706e7dbd5321eb4713e91885666c5a3205d87160a.exe
Resource
win10v2004-20220812-en
General
-
Target
ed201cfca808241815d2bc6706e7dbd5321eb4713e91885666c5a3205d87160a
-
Size
77KB
-
MD5
190d63e4d66b3f6452abd417e0b61b50
-
SHA1
72ad675033c702d382dba429623a136ed7599de5
-
SHA256
ed201cfca808241815d2bc6706e7dbd5321eb4713e91885666c5a3205d87160a
-
SHA512
e8048dfe7398a89813dfabddfe2c9f7120dc187c2ca52c317fc689545bac40b8b96ced93cbb444873e4a9b518442ebaae223f0f3b17e3b4145107b04c077df40
-
SSDEEP
1536:GnHyV7TX2RXCIdr0DTWslwHUqKD0/THmf/nkf:vV7r2RXJJ4sUtaTGf/nkf
Malware Config
Signatures
Files
-
ed201cfca808241815d2bc6706e7dbd5321eb4713e91885666c5a3205d87160a.exe windows x86
543cfb341b82c8e438cbdbae1e6c00cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
DeleteFileW
GetLastError
GetTimeFormatA
InterlockedExchange
GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetDiskFreeSpaceW
FindCloseChangeNotification
FindFirstChangeNotificationW
GetVolumeInformationA
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileA
GetModuleHandleW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CreateProcessW
Sleep
GetTickCount
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
GetProfileStringW
GetStartupInfoA
ws2_32
WSACloseEvent
WSAConnect
WSACreateEvent
WSAAddressToStringA
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
ole32
OleCreate
CoInitialize
StgCreateDocfile
CoSuspendClassObjects
CoUninitialize
OleSetContainedObject
msvcr71
fopen
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
time
memmove
strchr
atoi
wcslen
exit
fclose
fwrite
fputs
fseek
_acmdln
free
realloc
malloc
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
__p__fmode
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ