Static task
static1
Behavioral task
behavioral1
Sample
ed5a62e60f614243e303510d0eca8509efd560abf983beebbedbdcf2a07aaaad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed5a62e60f614243e303510d0eca8509efd560abf983beebbedbdcf2a07aaaad.exe
Resource
win10v2004-20220901-en
General
-
Target
ed5a62e60f614243e303510d0eca8509efd560abf983beebbedbdcf2a07aaaad
-
Size
276KB
-
MD5
b04dbc7ff11ce73599b39ce3a2c82d71
-
SHA1
a9e49eca82c4cfaa6de029de20356d3e9e60543f
-
SHA256
ed5a62e60f614243e303510d0eca8509efd560abf983beebbedbdcf2a07aaaad
-
SHA512
611eaf5740a6c3098814a0493f9e84efb015a6519f00e08d9e31ec618ed36790d130f074924a44d4bfd0754556b28fd94e77a626518397eb5e356cbb32c197b5
-
SSDEEP
6144:K8GuQwlyktxxAGm8xBCZsZGBEwBNSQpifQKuYa:KFutPmByEbN57VYa
Malware Config
Signatures
Files
-
ed5a62e60f614243e303510d0eca8509efd560abf983beebbedbdcf2a07aaaad.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ