Static task
static1
Behavioral task
behavioral1
Sample
ed6549cd7784b08342f839d341614a682a65157eda5035cb9276020e9d635b2c.exe
Resource
win10v2004-20220812-en
General
-
Target
ed6549cd7784b08342f839d341614a682a65157eda5035cb9276020e9d635b2c
-
Size
10.8MB
-
MD5
e9ca63701654858b5e3e9eca3f234ad9
-
SHA1
04603f383168b7dae309bd5cf58f2367a86685aa
-
SHA256
ed6549cd7784b08342f839d341614a682a65157eda5035cb9276020e9d635b2c
-
SHA512
1a3f04277f30729a0a43e9f951a528073581db9e595b24300f3c84fd450f15515ba09016e9cb1100e6e3753bf17b1476603cada5c2a451b4453854367ae01da0
-
SSDEEP
196608:yHoMtC6KE3rYDzxNxOKNQi7BsipX2RDgZfH7QSz1fz4cQAgiasfbM1RCTf6:yIIKpLIKqi7d2AsSzZzQIzM1R
Malware Config
Signatures
Files
-
ed6549cd7784b08342f839d341614a682a65157eda5035cb9276020e9d635b2c.exe windows x64
24bff06826129533a09ce490c5fe8ff8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GlobalSize
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EmptyClipboard
CharUpperBuffW
advapi32
RegSetValueExA
Sections
.text Size: - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
%U#EYRGT Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
%U#EYRGT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
%U#EYRGT Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ