Static task
static1
Behavioral task
behavioral1
Sample
efff805248a87d9090f5a5fc244743382600a5dc075f24a13a01817f9d59bda7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efff805248a87d9090f5a5fc244743382600a5dc075f24a13a01817f9d59bda7.exe
Resource
win10v2004-20220812-en
General
-
Target
efff805248a87d9090f5a5fc244743382600a5dc075f24a13a01817f9d59bda7
-
Size
17KB
-
MD5
e99bb55eda8866d7a62e7bd13ae2f1ed
-
SHA1
53d4cd53e8486aa4637fe69cb571d3adeb12448b
-
SHA256
efff805248a87d9090f5a5fc244743382600a5dc075f24a13a01817f9d59bda7
-
SHA512
a8f7d8e1ef3f9b68719a0ce7481efafc8cd5b93d6d2d3c0a9e10c5ee7f305df0a55f9fffbdd0e7878eabbfe847b11605c409004a761b66a7267419cb2d80aa8f
-
SSDEEP
384:IRTysTA01xGw4WGef9msHe9WFTNvtQxVE:IRG4l1xGw4WGg9hHeIFT3t
Malware Config
Signatures
Files
-
efff805248a87d9090f5a5fc244743382600a5dc075f24a13a01817f9d59bda7.exe windows x86
581b33db055f06aaa0c291dacb0a516f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
ReadFile
PeekNamedPipe
Sleep
CreateProcessA
GetStartupInfoA
CreateFileA
GetModuleFileNameA
GetCommandLineA
GetLastError
CreateMutexA
CreateDirectoryA
GetCurrentThreadId
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
CreatePipe
GetProcAddress
user32
GetInputState
PostThreadMessageA
GetMessageA
LoadCursorA
CopyIcon
SetSystemCursor
MessageBoxA
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
_controlfp
__set_app_type
__getmainargs
_acmdln
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
getchar
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA
Sections
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ