Static task
static1
Behavioral task
behavioral1
Sample
ed7c3d67a518855e745216ef7c03feb82c99d4cbb6df0de23705aea38fe6942a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed7c3d67a518855e745216ef7c03feb82c99d4cbb6df0de23705aea38fe6942a.exe
Resource
win10v2004-20220812-en
General
-
Target
ed7c3d67a518855e745216ef7c03feb82c99d4cbb6df0de23705aea38fe6942a
-
Size
358KB
-
MD5
26c19a5d910266c3b02b42dd7aef74d5
-
SHA1
e0e62fb01d644e8b974e7ed75fc071bc8c049f4a
-
SHA256
ed7c3d67a518855e745216ef7c03feb82c99d4cbb6df0de23705aea38fe6942a
-
SHA512
3474fcbfb1b45342ed805f9924c08a92b221f6cb08ac2945ce7162969abb42a2659d45d70850fd7a1775b97265835df1ab2e2984992107fa151aef624ad87431
-
SSDEEP
6144:yTlPcaOn7FWEooCSzVjmTMvISQuwfpEhw3O7CEKAThpAegd1rJvCM9JZ:yThO7cVSzV6AISQ7UCEKATA73xN9J
Malware Config
Signatures
Files
-
ed7c3d67a518855e745216ef7c03feb82c99d4cbb6df0de23705aea38fe6942a.exe windows x86
4cdf8ef4a1b46d08b3c660b298b6a504
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
LocalAlloc
GetModuleHandleA
Sleep
LoadResource
GetSystemTime
FindResourceA
GetVersion
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
FindResourceExA
VirtualFree
SetLastError
CloseHandle
LocalLock
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
LocalFree
GetProcAddress
VirtualAlloc
GetACP
GetCPInfo
GetLastError
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetStringTypeW
user32
MessageBoxA
IsWindowVisible
FindWindowA
EnableWindow
GetDC
LoadIconA
GetDesktopWindow
gdi32
GetObjectA
DeleteObject
ole32
CoUninitialize
avifil32
AVIBuildFilterA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ