Static task
static1
Behavioral task
behavioral1
Sample
ef5fc4acca425d27ffc2717ff4b5b00062e1b4dc294a6a8563bf03fa193c8e33.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef5fc4acca425d27ffc2717ff4b5b00062e1b4dc294a6a8563bf03fa193c8e33.exe
Resource
win10v2004-20220812-en
General
-
Target
ef5fc4acca425d27ffc2717ff4b5b00062e1b4dc294a6a8563bf03fa193c8e33
-
Size
51KB
-
MD5
f3e7a3aa0b31c349c5e377b66cbdd7e3
-
SHA1
8bcc4fe91a466a7b76e083aa4b4118079efc27b3
-
SHA256
ef5fc4acca425d27ffc2717ff4b5b00062e1b4dc294a6a8563bf03fa193c8e33
-
SHA512
680807e7232e2d228c5e0ed0b8680429c9a906b350b54da6b91153c726fb1a9ed79ee311fde27e193e59f1b64531a8ec4c35044a77a9b746e7a6529213546412
-
SSDEEP
1536:cqfZYmeUbGxFwHOHuZXylbPMQvx9X/db+RDJN:TfZYmtqxNOZ+PVX/db6
Malware Config
Signatures
Files
-
ef5fc4acca425d27ffc2717ff4b5b00062e1b4dc294a6a8563bf03fa193c8e33.exe windows x86
a68908256cb6f0485c859912492cc9fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
bind
accept
listen
WSAStartup
setsockopt
WSACleanup
send
kernel32
EnumResourceNamesA
EnumResourceTypesA
LockResource
ExitProcess
GetStartupInfoA
VirtualAlloc
FindResourceA
GetModuleHandleA
VirtualQueryEx
ole32
CLIPFORMAT_UserSize
CLIPFORMAT_UserFree
BindMoniker
CoRegisterMallocSpy
PropVariantChangeType
user32
SetParent
SendMessageA
DialogBoxParamA
MessageBoxA
SendDlgItemMessageA
Sections
CODE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 226B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 48KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE