Static task
static1
Behavioral task
behavioral1
Sample
0edbbcccabaa792c573669149a129aee360a81d1bf2bf7a2bf194c4c62a79605.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0edbbcccabaa792c573669149a129aee360a81d1bf2bf7a2bf194c4c62a79605.exe
Resource
win10v2004-20230221-en
General
-
Target
0edbbcccabaa792c573669149a129aee360a81d1bf2bf7a2bf194c4c62a79605
-
Size
4.7MB
-
MD5
a7eb3cb66d247e29f06ce14ddbee7d26
-
SHA1
d705259c237304398d7514f1ea8dc8ff05177acc
-
SHA256
0edbbcccabaa792c573669149a129aee360a81d1bf2bf7a2bf194c4c62a79605
-
SHA512
0e3639a45916ebeac7abcacb394ea831aec1a0d3273eff47492c351c676153f05756be76d0141155ccfbcb851c43409b1a529104232e0e32cb463f8c914fabed
-
SSDEEP
98304:9kdGBv67wylnAgrz/a+NZEsXgAIZt0/bxD2yjP:9DJ67tAyjNIPWxZ
Malware Config
Signatures
Files
-
0edbbcccabaa792c573669149a129aee360a81d1bf2bf7a2bf194c4c62a79605.exe windows x86
f4ebd663edc24d6ebe7c16e3b1febdb9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
borlndmm
@Borlndmm@SysGetMem$qqri
version
VerQueryValueA
gdi32
UpdateColors
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
comctl32
InitializeFlatSB
winspool.drv
OpenPrinterA
comdlg32
PrintDlgA
wsock32
WSACleanup
winmm
PlaySoundA
msvcrt
_ftol
setupapi
SetupDiGetDeviceRegistryPropertyA
Sections
CODE Size: 4.6MB - Virtual size: 14.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE