Static task
static1
Behavioral task
behavioral1
Sample
1ed495cb34865c00854555b612d0c6402fc4849d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1ed495cb34865c00854555b612d0c6402fc4849d.exe
Resource
win10v2004-20221111-en
General
-
Target
1ed495cb34865c00854555b612d0c6402fc4849d
-
Size
393KB
-
MD5
e9d9e846191bbd878db3f90da0588a8c
-
SHA1
1ed495cb34865c00854555b612d0c6402fc4849d
-
SHA256
aec82e7351600082db496244f2810ef8692f0bd8eb5f43a5640bef585a96d0fc
-
SHA512
777efdce3e592d2d727c63a3a52f353d99f4e21d78dd12cbf6c04c13108b30335a20a1cafe3774ef1938c4e32e5d480c4458334ce6a1a96337f0fd00557dbea5
-
SSDEEP
6144:rDeq3xg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjMY:Xecg7dUmmLen1G6Lkjr7plWzuDRsVqZO
Malware Config
Signatures
Files
-
1ed495cb34865c00854555b612d0c6402fc4849d.exe windows x86
70d0817a7f0fdf1bcbc6a9a70b74cc65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasA
LocalFree
GetLastError
GetCalendarInfoA
GetACP
LoadLibraryExA
LocalLock
CreateFileMappingA
CloseHandle
TlsGetValue
FreeEnvironmentStringsA
FindAtomA
WaitForMultipleObjects
CreateFileA
HeapCreate
GlobalUnlock
GetConsoleCP
FindClose
GetModuleHandleA
Sleep
user32
CheckRadioButton
CascadeWindows
SetFocus
GetIconInfo
FillRect
IsWindow
DrawEdge
DefWindowProcA
DrawTextA
GetDC
CallWindowProcA
DispatchMessageA
GetDlgItem
MessageBoxA
setupapi
CM_Add_Range
CM_Add_IDA
SetupCloseInfFile
SetupCloseLog
CMP_Report_LogOn
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ