Static task
static1
Behavioral task
behavioral1
Sample
ef5d8ca727e673cd0372c854444fb2138000cf402f4f0960c1fbe1b6abbac0b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef5d8ca727e673cd0372c854444fb2138000cf402f4f0960c1fbe1b6abbac0b8.exe
Resource
win10v2004-20220901-en
General
-
Target
ef5d8ca727e673cd0372c854444fb2138000cf402f4f0960c1fbe1b6abbac0b8
-
Size
28KB
-
MD5
64b3f70cff445b57af6b96eb929257f3
-
SHA1
2aaa64cb2063542cb45d80a4602663f6b3cd1fad
-
SHA256
ef5d8ca727e673cd0372c854444fb2138000cf402f4f0960c1fbe1b6abbac0b8
-
SHA512
0ec8b86c095d01da039a2b4e1a30a480e8e5bb168826166070ea8e6c466162de876e33ea8681c63fc0e82752b0889356a10b54976fddcb9b501cc86369c8908e
-
SSDEEP
192:KOnCVcFmjw9dW8pCMGbOPFY68Zlf0gkm1ELq1DBO+ZxjzrRgvXGtJOj/v:Kdk9d7pCMrb49dzrRgvXGtJODv
Malware Config
Signatures
Files
-
ef5d8ca727e673cd0372c854444fb2138000cf402f4f0960c1fbe1b6abbac0b8.exe windows x86
2be6d92af86f8973753bdde021c2acd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
OpenEventA
SetEvent
Sleep
DeleteFileA
GetCurrentProcess
GetModuleHandleA
WriteFile
GetModuleHandleW
ReadFile
CloseHandle
GetProcAddress
VirtualQuery
ExitProcess
GetCommandLineA
OpenProcess
GetShortPathNameA
GetEnvironmentVariableA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
user32
CharUpperA
MessageBoxA
ExitWindowsEx
wsprintfA
PeekMessageW
advapi32
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
RegOpenKeyW
RegOpenKeyA
LookupPrivilegeValueA
shell32
ShellExecuteExA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE