Static task
static1
Behavioral task
behavioral1
Sample
ef5cc7de45d7a11b4bb608fe4e5bfde185d086750fb4db44aafcc43b41fc1d50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef5cc7de45d7a11b4bb608fe4e5bfde185d086750fb4db44aafcc43b41fc1d50.exe
Resource
win10v2004-20220812-en
General
-
Target
ef5cc7de45d7a11b4bb608fe4e5bfde185d086750fb4db44aafcc43b41fc1d50
-
Size
804KB
-
MD5
91c58fe2276b68e73de04a1aae4c349c
-
SHA1
bd34b30693ed347ce37063badce094d9f5f6562c
-
SHA256
ef5cc7de45d7a11b4bb608fe4e5bfde185d086750fb4db44aafcc43b41fc1d50
-
SHA512
0387355e68c8dad86f144dfe7b31f1cea0d6eb0df4c44782b314a64c31521944bcd375b9a700815668a697f50439598eb14f0cf3c96ca23ff71b576f14bef5ff
-
SSDEEP
12288:yIv+2m1PFEBScqX/UAEi34pRh3LSwGVFhRs/qy8N5gxV:hkFE5o/Uo3oR9iFfsSfny
Malware Config
Signatures
Files
-
ef5cc7de45d7a11b4bb608fe4e5bfde185d086750fb4db44aafcc43b41fc1d50.exe windows x86
624d6dd1e7fe2c76bcf827ab69be1aa0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcess
GetVersionExA
VirtualAlloc
GetProcessHeap
GetModuleHandleW
GetModuleHandleA
VirtualAlloc
LoadLibraryW
InterlockedCompareExchange
GetModuleFileNameA
InterlockedCompareExchange
lstrlenA
GetCurrentProcess
CloseHandle
HeapAlloc
lstrlenA
CreateFileW
ReadFile
QueryPerformanceCounter
DeleteCriticalSection
QueryPerformanceCounter
GetModuleFileNameA
GetProcAddress
VirtualProtect
GetVersionExA
GetProcAddress
ReadFile
LocalFree
FreeLibrary
InitializeCriticalSection
LeaveCriticalSection
VirtualAlloc
ReadFile
UnhandledExceptionFilter
HeapAlloc
GetCurrentProcess
InterlockedExchange
GetCurrentThreadId
GetTickCount
GetLastError
HeapFree
GetTickCount
CreateEventW
GetCurrentThreadId
lstrcmpiW
LoadLibraryW
InterlockedDecrement
CloseHandle
CreateThread
Sleep
GetCurrentProcess
QueryPerformanceCounter
SetLastError
CloseHandle
lstrlenA
LocalFree
VirtualProtect
GetLastError
HeapDestroy
HeapFree
GetVersionExA
EnterCriticalSection
VirtualProtect
GetTickCount
HeapFree
LocalFree
DisableThreadLibraryCalls
QueryPerformanceCounter
GetLastError
GetCurrentProcess
LoadLibraryA
FreeLibrary
lstrcmpiW
EnterCriticalSection
LocalAlloc
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
LocalAlloc
CreateThread
GetVersionExA
GetModuleFileNameW
VirtualProtect
GetTickCount
FreeLibrary
user32
ReleaseDC
PeekMessageW
InvalidateRect
SetTimer
PostMessageW
KillTimer
EndPaint
GetWindowRect
LoadStringW
EnableWindow
PostQuitMessage
TranslateMessage
EndPaint
SetFocus
DialogBoxParamW
SetTimer
SendMessageW
TranslateMessage
GetDC
SetFocus
GetSystemMetrics
CharNextW
GetParent
LoadCursorW
GetSystemMetrics
LoadIconW
IsDlgButtonChecked
DialogBoxParamW
DispatchMessageW
SetTimer
CreateWindowExW
SetWindowTextW
DialogBoxParamW
BeginPaint
SendDlgItemMessageW
GetDC
GetParent
MessageBoxW
PostQuitMessage
IsDlgButtonChecked
GetClientRect
SetWindowPos
GetParent
PostQuitMessage
LoadCursorW
SetForegroundWindow
GetDlgItem
InvalidateRect
ShowWindow
GetWindowLongW
DestroyWindow
GetDesktopWindow
LoadCursorW
GetWindowRect
TranslateMessage
LoadCursorW
TranslateMessage
CreateWindowExW
LoadCursorW
BeginPaint
PostMessageW
GetSysColor
GetWindowRect
wsprintfA
SetCursor
GetParent
SendDlgItemMessageW
PostMessageW
DefWindowProcW
LoadIconW
EndPaint
EndPaint
SetWindowTextW
GetSystemMetrics
wsprintfA
LoadCursorW
DefWindowProcW
GetFocus
GetSysColor
CreateWindowExW
BeginPaint
LoadCursorW
PostQuitMessage
CharNextW
SetCursor
Sections
.text Size: 717KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ