Static task
static1
Behavioral task
behavioral1
Sample
eff248f28237c7fa7c9373a91b4c25cec9943792e462838fceccae7b408efee5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eff248f28237c7fa7c9373a91b4c25cec9943792e462838fceccae7b408efee5.exe
Resource
win10v2004-20220901-en
General
-
Target
eff248f28237c7fa7c9373a91b4c25cec9943792e462838fceccae7b408efee5
-
Size
23KB
-
MD5
afeed2a5134df400d38225c571fd68d7
-
SHA1
a23e7e977579f46bb090169a65f46f59bb7d5187
-
SHA256
eff248f28237c7fa7c9373a91b4c25cec9943792e462838fceccae7b408efee5
-
SHA512
c99192da377675f9f4a9bc9c12dded50c2c7651c5d1fa1f8d8cf9eabe42d753472d25b50c255bbb3c86dd477c6fd758ce884960e33f366f2028e561e4f8aaa39
-
SSDEEP
384:f1qf/TVfH/ECkq4rUaegaL706QauOvpN8dmaEOBWnlKYw8NXYg2vIBHRBR5:s53kq4ADX0QvX8pT2KB8JYfvUj
Malware Config
Signatures
Files
-
eff248f28237c7fa7c9373a91b4c25cec9943792e462838fceccae7b408efee5.exe windows x86
72a107706575752cd2eceb7bf22f2778
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetArcDirection
CreatePatternBrush
SetWorldTransform
SetRectRgn
TextOutW
GetObjectType
ExtCreatePen
SetMapperFlags
RectVisible
CreateBitmap
OffsetWindowOrgEx
GetTextExtentPoint32W
CopyMetaFileW
SetViewportOrgEx
IntersectClipRect
GetObjectW
MoveToEx
SetTextColor
SelectObject
GetDCOrgEx
PatBlt
SetGraphicsMode
SetViewportExtEx
comdlg32
GetOpenFileNameA
PrintDlgA
msvcrt
_itow
strncmp
wcschr
_ultoa
strncpy
wcscpy
memmove
_wcsnicmp
isdigit
_onexit
_except_handler3
strtoul
bsearch
malloc
free
_initterm
_snwprintf
sprintf
_adjust_fdiv
_wcsicmp
wcslen
__dllonexit
isupper
_commit
wcscmp
_ltoa
qsort
_ltow
atol
comctl32
PropertySheetW
ImageList_Destroy
CreatePropertySheetPageW
InitCommonControlsEx
CreateToolbarEx
ImageList_Draw
ImageList_GetIconSize
dnsapi
DnsApiAlloc
DnsApiFree
DnsValidateName_UTF8
kernel32
GetCurrentProcess
GetFileSize
GetLastError
MoveFileW
GetModuleHandleA
RaiseException
HeapFree
SuspendThread
GetUserDefaultLCID
SetCurrentDirectoryA
GetAtomNameW
SetEvent
HeapReAlloc
DeleteFileW
LoadLibraryA
MulDiv
TlsSetValue
FindResourceW
GlobalUnlock
FileTimeToSystemTime
DuplicateHandle
UnlockFile
GetVersion
SetEndOfFile
FreeEnvironmentStringsA
GlobalAlloc
LCMapStringW
WriteFile
SetFileAttributesW
GetFullPathNameW
Sleep
TlsFree
GetLocaleInfoW
SetUnhandledExceptionFilter
ConvertDefaultLocale
CreateThread
LockFile
UnhandledExceptionFilter
ExitProcess
WaitForSingleObject
GetVersionExA
FreeEnvironmentStringsW
lstrcpyA
GetCPInfo
InitializeCriticalSection
FreeResource
InterlockedExchange
CopyFileW
SetFileTime
GlobalSize
FlushFileBuffers
GetDriveTypeW
VirtualFree
SetHandleCount
GetFileTime
GetProcessHeap
GetOEMCP
GetPrivateProfileIntW
GlobalHandle
ReadFile
WideCharToMultiByte
IsValidCodePage
GetPrivateProfileStringW
HeapCreate
GetStringTypeExW
LeaveCriticalSection
FileTimeToLocalFileTime
lstrlenA
CreateProcessW
CloseHandle
GetCurrentThread
lstrlenW
GetStdHandle
LockResource
GlobalGetAtomNameW
HeapDestroy
GetVolumeInformationW
lstrcmpW
ExitThread
GetCurrentThreadId
GlobalDeleteAtom
GetCurrentDirectoryA
GlobalFindAtomW
InterlockedDecrement
HeapAlloc
SetErrorMode
FindFirstFileW
WritePrivateProfileStringW
DeleteCriticalSection
FindNextFileW
TlsAlloc
FatalAppExitA
EnterCriticalSection
CreateFileW
LocalAlloc
InterlockedIncrement
TerminateProcess
GetVersionExW
SystemTimeToFileTime
GetACP
GetFileAttributesW
lstrcmpiW
GlobalFlags
SetThreadPriority
RtlUnwind
IsDebuggerPresent
LCMapStringA
GetFileAttributesA
GlobalAddAtomW
LocalFileTimeToFileTime
CompareStringW
CompareStringA
lstrcmpA
GetSystemInfo
GlobalReAlloc
SetFilePointer
GetModuleFileNameW
GetCurrentProcessId
FormatMessageW
CreateEventW
VirtualAlloc
GetThreadLocale
FindClose
TlsGetValue
SizeofResource
GetShortPathNameW
ResetEvent
GetCommandLineW
GlobalFree
LoadResource
GlobalLock
GetStartupInfoW
LocalReAlloc
GetEnvironmentStrings
ResumeThread
HeapSize
GetEnvironmentStringsW
EnumResourceLanguagesW
SetLastError
GetCommandLineA
Sections
.data Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE