Static task
static1
Behavioral task
behavioral1
Sample
edf411b52d30cc96821bb1058ca2026b0ef5da3f55a5c0eb60d7bce3425275ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edf411b52d30cc96821bb1058ca2026b0ef5da3f55a5c0eb60d7bce3425275ac.exe
Resource
win10v2004-20220812-en
General
-
Target
edf411b52d30cc96821bb1058ca2026b0ef5da3f55a5c0eb60d7bce3425275ac
-
Size
192KB
-
MD5
16ff9d30643a4340a557fb29b1d06a66
-
SHA1
95c3088821ea6e14a3476206c49e7e5d1f28789c
-
SHA256
edf411b52d30cc96821bb1058ca2026b0ef5da3f55a5c0eb60d7bce3425275ac
-
SHA512
775ef24bb72121a2ed5c086125041de6e52bf68909cac9ab39cfd2caddda069a4dcdfb4b4df01652b1d4fefe59324b6e30abc9b1949fe3614af67b872aed8abc
-
SSDEEP
3072:iCg/CfSLtbGrURlBa8IsXJtgQAUuhT3W86D1ahYM90os5Jav1SRoDzppU6dCIDjI:nKhbeTs3jAUuVW86Zcqn5J81SA7dCh
Malware Config
Signatures
Files
-
edf411b52d30cc96821bb1058ca2026b0ef5da3f55a5c0eb60d7bce3425275ac.exe windows x86
0bc9ec1af53e43d9e872ecaee72b4128
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetMalloc
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
gdi32
GetTextMetricsA
SelectObject
DeleteObject
GetTextExtentPointA
GetDeviceCaps
CreateFontIndirectA
msimg32
AlphaBlend
TransparentBlt
kernel32
GetACP
InterlockedExchange
DeleteCriticalSection
TlsGetValue
GetCPInfoExA
WideCharToMultiByte
InterlockedIncrement
RaiseException
GetEnvironmentStringsW
GetOEMCP
QueryPerformanceCounter
GetThreadLocale
GetStartupInfoA
TlsSetValue
EnumResourceNamesW
FreeEnvironmentStringsW
InitializeCriticalSection
MultiByteToWideChar
GetLastError
GetCPInfo
GetFileType
SetHandleCount
GetLocaleInfoA
GetStdHandle
HeapSize
FreeEnvironmentStringsA
RaiseException
UnhandledExceptionFilter
GetTickCount
lstrlenW
GetVersionExA
LeaveCriticalSection
GetEnvironmentStrings
WriteFile
EnterCriticalSection
GetCurrentProcessId
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ