Static task
static1
Behavioral task
behavioral1
Sample
ed597a6deddfb873ef73469ba08c11275184f8ac6e43a603f99bebe424671948.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed597a6deddfb873ef73469ba08c11275184f8ac6e43a603f99bebe424671948.exe
Resource
win10v2004-20221111-en
General
-
Target
ed597a6deddfb873ef73469ba08c11275184f8ac6e43a603f99bebe424671948
-
Size
41KB
-
MD5
fc0d45bc049aba7a6f41a105df90fcf6
-
SHA1
20e6309cd3f750f30b435701edfb8314862bbe3c
-
SHA256
ed597a6deddfb873ef73469ba08c11275184f8ac6e43a603f99bebe424671948
-
SHA512
59e8df072e0031bab8f1cf230b3e3a84fb8555376d743eb5ec5e237986d6efbcb6d6ee65f1b48f9b729696b17134204366f16a903b6126f9e640e28e13e9c82f
-
SSDEEP
768:Pngf4HOGlJF2HTMVNjAHpFLPxlcFRT9Idks:PzHOGPS6ULJVdk
Malware Config
Signatures
Files
-
ed597a6deddfb873ef73469ba08c11275184f8ac6e43a603f99bebe424671948.exe windows x86
779e8e818ae6b034a91bc510bf4ddd68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperBuffA
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetTimeZoneInformation
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MoveFileA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
Sections
AUTO Size: 29KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 6KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.desc Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ