Static task
static1
Behavioral task
behavioral1
Sample
ef5416face64bd079d897f2944ed5c5a09a898e60e8211a2139ab906ea74e4e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef5416face64bd079d897f2944ed5c5a09a898e60e8211a2139ab906ea74e4e5.exe
Resource
win10v2004-20220812-en
General
-
Target
ef5416face64bd079d897f2944ed5c5a09a898e60e8211a2139ab906ea74e4e5
-
Size
4KB
-
MD5
e65c88e55530085a28672bfed83c3155
-
SHA1
1cb278c039d2529ba49c7559513d488e66a77694
-
SHA256
ef5416face64bd079d897f2944ed5c5a09a898e60e8211a2139ab906ea74e4e5
-
SHA512
9bc4a437c96827494aeaa02492592489d447ff5c97841bf45eea7807f6e9fcfc2be5d6d175bfb5bd058a9a6d5d54cd2a0f1a563ac570bcc0e67add997a25907c
Malware Config
Signatures
Files
-
ef5416face64bd079d897f2944ed5c5a09a898e60e8211a2139ab906ea74e4e5.exe windows x86
895c6d7ddb06916f61fc4317889cd546
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
CreateFileA
GetCommandLineA
GetFileSize
CopyFileA
ExitProcess
GetModuleFileNameA
GetLastError
CloseHandle
GetVersion
GetWindowsDirectoryA
LoadLibraryA
LocalAlloc
GetProcAddress
Sleep
WriteFile
WritePrivateProfileStringA
GetModuleHandleA
LocalFree
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetGetConnectedState
InternetCloseHandle
advapi32
RegCloseKey
RegOpenKeyA
RegSetValueExA
shell32
ShellExecuteA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE