Static task
static1
Behavioral task
behavioral1
Sample
ed683fe31cfa0f334799a246e070fd4e8bb60e435ad11695f9c9cd3d58d3807c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ed683fe31cfa0f334799a246e070fd4e8bb60e435ad11695f9c9cd3d58d3807c.exe
Resource
win10v2004-20221111-en
General
-
Target
ed683fe31cfa0f334799a246e070fd4e8bb60e435ad11695f9c9cd3d58d3807c
-
Size
326KB
-
MD5
46c67e6a5acfff17a045f51e23b386a0
-
SHA1
9b3404d78720fef74036beb0bc1acddb3cf7d0af
-
SHA256
ed683fe31cfa0f334799a246e070fd4e8bb60e435ad11695f9c9cd3d58d3807c
-
SHA512
bf2a14fb3146eb6953c91bab8f91b8a1abce7cb6544df318ecce3426e5956d82405b7cf13293a0e6d8f50e9eeffe830745c477debb2220654cdd79588f6da0d7
-
SSDEEP
6144:rBYQAaJu2fgNcrv3pZWpi7zmqrqdoSK8ncoRnIxGactT2u:rYcT3gi7zmqudoSZncsnQGaMT
Malware Config
Signatures
Files
-
ed683fe31cfa0f334799a246e070fd4e8bb60e435ad11695f9c9cd3d58d3807c.exe windows x86
47fa7dd2b74a65897d2d4e4d642faa34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegEnumKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteKeyW
RegSetValueExA
RegCreateKeyExA
kernel32
VirtualAlloc
lstrlenA
EnterCriticalSection
ReadFile
LoadLibraryA
LeaveCriticalSection
LocalFree
Sleep
LocalAlloc
InterlockedExchange
TryEnterCriticalSection
GlobalAlloc
WaitForSingleObject
SetLastError
FindClose
SetFilePointer
GetEnvironmentStringsW
HeapAlloc
HeapFree
InitializeCriticalSection
ExitProcess
SizeofResource
GlobalFree
GetModuleFileNameA
CreateFileA
SetStdHandle
GetModuleHandleW
DeleteCriticalSection
GetModuleHandleA
GetStartupInfoW
mpr
WNetCancelConnection2A
msvcrt
_XcptFilter
_cexit
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
_c_exit
_adjust_fdiv
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ