Static task
static1
Behavioral task
behavioral1
Sample
ed1b19a666ab2858d8bbadad4cb3ed8528365ff52efac8f6d8bcffe4bdecf498.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ed1b19a666ab2858d8bbadad4cb3ed8528365ff52efac8f6d8bcffe4bdecf498.exe
Resource
win10v2004-20220901-en
General
-
Target
ed1b19a666ab2858d8bbadad4cb3ed8528365ff52efac8f6d8bcffe4bdecf498
-
Size
337KB
-
MD5
f3ad74f7074d2e2e73dfa1df0f0af02a
-
SHA1
f0a6fe0adb7a9cd47bc2d6aa4dab6eb5201ccf72
-
SHA256
ed1b19a666ab2858d8bbadad4cb3ed8528365ff52efac8f6d8bcffe4bdecf498
-
SHA512
8d8b3431e7dfbb11af7fd26db4f5e4f8802248fb657e1afa499e250ea7942f42f7512ed3a99bb45f53f7a9fec79a0f7259d8764d497a900fbfc753a8ac7570b0
-
SSDEEP
6144:Hhk7p4oiM3rk9dnyyw4D4dTV8c444ZIJhSvOJxc57vHhfhUSJ:Bk7p1rAw4DG8cVhSvOiNhUS
Malware Config
Signatures
Files
-
ed1b19a666ab2858d8bbadad4cb3ed8528365ff52efac8f6d8bcffe4bdecf498.exe windows x86
f6973686aec55f8d5b8384596ae37db2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReleaseMutex
ReleaseMutex
LocalFree
HeapCreate
lstrcpyA
GetComputerNameA
GetSystemTime
LoadLibraryA
SetLastError
FindAtomA
GetTickCount
GetDriveTypeW
SetEvent
GetCommandLineA
GetDiskFreeSpaceW
CreateThread
CloseHandle
GetFileAttributesA
LoadLibraryW
user32
GetDlgItem
CloseWindow
DestroyCaret
FillRect
GetClassInfoA
CreateWindowExA
DrawStateA
DispatchMessageA
CallWindowProcA
SetFocus
GetClipCursor
GetKeyState
GetComboBoxInfo
cryptnet
CryptGetTimeValidObject
CryptGetObjectUrl
CryptCancelAsyncRetrieval
CertDllVerifyCTLUsage
CryptUninstallCancelRetrieval
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ