Static task
static1
Behavioral task
behavioral1
Sample
ed29f3e938dc3c5e47e95ce416aba72d35214c626d769ad5c1ccbfe93c1be9df.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ed29f3e938dc3c5e47e95ce416aba72d35214c626d769ad5c1ccbfe93c1be9df.exe
Resource
win10v2004-20221111-en
General
-
Target
ed29f3e938dc3c5e47e95ce416aba72d35214c626d769ad5c1ccbfe93c1be9df
-
Size
352KB
-
MD5
962c79f3948020284b9fb4a7c84d4f60
-
SHA1
8d12369c584ea3bdf4e7f0428311048ff25e1744
-
SHA256
ed29f3e938dc3c5e47e95ce416aba72d35214c626d769ad5c1ccbfe93c1be9df
-
SHA512
e1ae5e51feff641ce3c714106133af420dffec9fe3f9f9699ec00c3b83341cb23c986fcac6c65c09d48837781430d1eb5b66bfd4bdaafa6f589d37eb38501740
-
SSDEEP
6144:YioHZn6nvYqAOBVVW7bO1ENnRlyr8VEoNR6VJKKq8gnk3ViAnmZga4UNBqb:YTyTDVGbPnTyEyMMgnOLlaRN
Malware Config
Signatures
Files
-
ed29f3e938dc3c5e47e95ce416aba72d35214c626d769ad5c1ccbfe93c1be9df.exe windows x86
fd145841c8d854c9cce1c426d7019bd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
GetLastError
VirtualFreeEx
ExitProcess
Sleep
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetCurrentThread
HeapFree
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
HeapReAlloc
HeapAlloc
user32
LoadIconA
IsIconic
advapi32
CryptAcquireContextA
CryptGenKey
ole32
CoUninitialize
avifil32
AVISaveOptionsFree
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 236KB - Virtual size: 778KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ