Static task
static1
Behavioral task
behavioral1
Sample
11ef4bf1e411b879d485c6f1518e5eb6802d34f72903545a6ed8a048b6862b5a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
11ef4bf1e411b879d485c6f1518e5eb6802d34f72903545a6ed8a048b6862b5a.exe
Resource
win10v2004-20220901-en
General
-
Target
11ef4bf1e411b879d485c6f1518e5eb6802d34f72903545a6ed8a048b6862b5a
-
Size
92KB
-
MD5
ff3227bc882fe246d533a52d045143ab
-
SHA1
74ce21ae214f77962cc242e992a7567fa295600f
-
SHA256
11ef4bf1e411b879d485c6f1518e5eb6802d34f72903545a6ed8a048b6862b5a
-
SHA512
74f25b6203cb27494262a2ef96da74194cc7447373bfeb095544c2da1d477e0823e5f712a8faf246b9a61aef6c68cd26ceb5c8c4776d5effee8ef6d65fc02e69
-
SSDEEP
1536:4cFLNbY8Isk95PoAWz3MADys2cthIYM770UoxOJdnrmB7eqD:4AFBS5PoAYM7FaEdnrmVeq
Malware Config
Signatures
Files
-
11ef4bf1e411b879d485c6f1518e5eb6802d34f72903545a6ed8a048b6862b5a.exe windows x86
90b2257b3832febdb229ce3bbabb456d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
Sleep
MoveFileA
CreateThread
VirtualFree
GetFileAttributesA
GetThreadLocale
MulDiv
GetStringTypeW
ResetEvent
LoadLibraryA
FindClose
GetLocaleInfoA
GetStartupInfoA
SetHandleCount
lstrlenA
HeapFree
VirtualAlloc
LoadResource
EnumCalendarInfoA
GetOEMCP
GetUserDefaultLCID
GetVersion
GetModuleHandleA
GetCommandLineA
GetFileType
ExitProcess
CloseHandle
FindResourceA
FreeLibrary
user32
BeginPaint
GetMenuStringA
GetSysColor
EndDeferWindowPos
CreatePopupMenu
IsChild
GetSysColorBrush
GetFocus
GetDlgItem
GetClipboardData
GetScrollPos
DrawIconEx
IsWindowVisible
GetDCEx
DefFrameProcA
IsMenu
DrawFrameControl
GetScrollRange
SetCursor
GetClassInfoA
DeferWindowPos
GetMenuItemInfoA
GetClassLongA
GetCursorPos
EqualRect
DrawTextA
CheckMenuItem
DrawMenuBar
EndPaint
ShowWindow
DispatchMessageA
SetWindowTextA
GetLastActivePopup
IsWindowEnabled
GetIconInfo
EnableWindow
DefMDIChildProcA
CallWindowProcA
DrawEdge
CharNextA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 68KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ