Static task
static1
Behavioral task
behavioral1
Sample
edd0472dccc1199e60f830a289b7a4092710c0f40cbbde6eed1f5549eb1b3f41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edd0472dccc1199e60f830a289b7a4092710c0f40cbbde6eed1f5549eb1b3f41.exe
Resource
win10v2004-20220812-en
General
-
Target
edd0472dccc1199e60f830a289b7a4092710c0f40cbbde6eed1f5549eb1b3f41
-
Size
305KB
-
MD5
0b236a8a8e8503b7057d78c99ebc6920
-
SHA1
5179d54345fdda4a09a584c5f2b2556330a21d47
-
SHA256
edd0472dccc1199e60f830a289b7a4092710c0f40cbbde6eed1f5549eb1b3f41
-
SHA512
eb1967639fd1e7db95ec85054fefb031ffea57f5beaa47ed0f461cca6e89c5d5ae8dd73fb55eefe386094eecdcc1a226ba5b3f1d1ce7cf88da70fd574de68733
-
SSDEEP
6144:Dpj/Ze1MTLE/PHFUVdhnw7ZKXQVTqnlVRm+ZalRiX:dNe1MyPHUdtyZKRnl2+ZXX
Malware Config
Signatures
Files
-
edd0472dccc1199e60f830a289b7a4092710c0f40cbbde6eed1f5549eb1b3f41.exe windows x86
bb9f0c74d436a13bb9a1740d4614aa3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
GetProcessHeap
GetConsoleTitleA
GetModuleHandleW
GetConsoleAliasW
GetVersion
GetShortPathNameW
HeapCreate
GetExitCodeProcess
DeleteFileA
CreateMailslotW
SetFilePointer
SetEnvironmentVariableA
GetStringTypeW
SetCurrentDirectoryA
GetACP
DeleteFileA
HeapFree
Heap32Next
DeleteFileA
GetStringTypeW
WriteConsoleW
LoadLibraryA
mstscax
DllGetTscCtlVer
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ