Static task
static1
Behavioral task
behavioral1
Sample
1edc828da884f2b17544ba6609f55bba3c950093528a5e857a23be8ae78fcb36.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1edc828da884f2b17544ba6609f55bba3c950093528a5e857a23be8ae78fcb36.exe
Resource
win10v2004-20230220-en
General
-
Target
1edc828da884f2b17544ba6609f55bba3c950093528a5e857a23be8ae78fcb36
-
Size
214KB
-
MD5
faebc8605aa6ae0210b3d7332a4085b4
-
SHA1
0da4e0038853df664af34d14a20cb7ae48a35cfa
-
SHA256
1edc828da884f2b17544ba6609f55bba3c950093528a5e857a23be8ae78fcb36
-
SHA512
8f6ebafba4178d641c92fa48d9eef5ebd4582101a2a9689a189ded3c049b431a24d524c108b37982a1f6c431c8c130c0ab146d2d129d80dc579a77b45b1bb452
-
SSDEEP
3072:HPI88gNJMXBNO2gwvT+qaRER85N/0N9eaoRSh+KpVmytJKF7Gb:vI8FNmBJrxR85N/0N9eao+UCJsM
Malware Config
Signatures
Files
-
1edc828da884f2b17544ba6609f55bba3c950093528a5e857a23be8ae78fcb36.exe windows x86
c1ed536789620e443598b625f8d0ae7c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetSystemTimeAdjustment
TerminateProcess
GetMailslotInfo
FillConsoleOutputCharacterW
SetLastError
GetProcAddress
VirtualAlloc
FindAtomA
GetTickCount
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetSystemTimeAsFileTime
SetProcessShutdownParameters
GetNativeSystemInfo
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapReAlloc
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
user32
GetRegisteredRawInputDevices
GetRawInputBuffer
GetAltTabInfoW
RegisterRawInputDevices
ValidateRect
GetNextDlgGroupItem
EndPaint
gdi32
SetViewportExtEx
shell32
ShellAboutA
DragQueryFileW
FindExecutableA
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ