Static task
static1
Behavioral task
behavioral1
Sample
effa157c8cc5ae8d5c82c083aa2512c845fef8c12e30b6b7881e4bf52531c60e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
effa157c8cc5ae8d5c82c083aa2512c845fef8c12e30b6b7881e4bf52531c60e.exe
Resource
win10v2004-20220901-en
General
-
Target
effa157c8cc5ae8d5c82c083aa2512c845fef8c12e30b6b7881e4bf52531c60e
-
Size
259KB
-
MD5
f4c1a16f492e91cf4e98dbfc0bb8b671
-
SHA1
8476135701e75ddd160afae75f79d0fbdb85e390
-
SHA256
effa157c8cc5ae8d5c82c083aa2512c845fef8c12e30b6b7881e4bf52531c60e
-
SHA512
4fe861dff4029be4beee29999bf7fc8755dcb2ac6b2d64e7cbcf56cd2374ded031929c1408396dc2f070e3c22aa6d4c8de552f5c569ee7cc82d2cdf883ab2497
-
SSDEEP
6144:uYiHZV2ZIYclEVW/62FeqZTHPm6BNFiIgjdHgwrmF9:ri50ZPSZHPm6BmrmF
Malware Config
Signatures
Files
-
effa157c8cc5ae8d5c82c083aa2512c845fef8c12e30b6b7881e4bf52531c60e.exe windows x86
333c093846e168c7e4771d8975c64bf0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateCompatibleBitmap
LineTo
version
VerFindFileA
GetFileVersionInfoSizeA
kernel32
MoveFileA
VirtualAllocEx
GetModuleHandleA
ExitThread
WaitForSingleObject
GetSystemDefaultLangID
GetProcAddress
GetOEMCP
GetFileAttributesA
FormatMessageA
GetVersionExA
DeleteFileA
SetThreadLocale
lstrcmpiA
ExitProcess
lstrcpynA
SizeofResource
user32
GetKeyboardType
LoadKeyboardLayoutA
MapVirtualKeyA
SetScrollRange
GetScrollRange
GetDesktopWindow
FindWindowA
EnumChildWindows
GetDCEx
EmptyClipboard
SetRect
SetClipboardData
GetClassLongA
MsgWaitForMultipleObjects
DrawMenuBar
SetFocus
DefWindowProcA
wsprintfA
EndPaint
InsertMenuItemA
SendMessageA
GetClassInfoA
GetClassNameA
SystemParametersInfoA
CharNextW
WindowFromPoint
ActivateKeyboardLayout
IsChild
GetMenuItemInfoA
SetParent
GetForegroundWindow
SetScrollInfo
GetWindowRect
DrawTextA
CreateMenu
SendMessageW
TranslateMessage
GetMenuItemCount
WaitMessage
IsWindowEnabled
CreatePopupMenu
RemoveMenu
ClientToScreen
SetActiveWindow
DrawIcon
CharUpperBuffA
CharLowerA
GetWindowTextA
ShowScrollBar
RemovePropA
UnregisterClassA
EnableWindow
LoadCursorA
LoadStringA
SetWindowLongW
OemToCharA
SetCursor
GetMenuItemID
PostQuitMessage
GetMenuState
CheckMenuItem
DefMDIChildProcA
GetCapture
MoveWindow
GetClientRect
PeekMessageW
SetScrollPos
SetForegroundWindow
GetKeyState
GetSystemMenu
GetScrollInfo
GetSystemMetrics
GetScrollPos
ScrollWindow
OpenClipboard
GetKeyNameTextA
GetKeyboardLayout
DestroyMenu
GetCursor
GetParent
EnumThreadWindows
DestroyCursor
IsWindowVisible
GetKeyboardLayoutNameA
InsertMenuA
GetIconInfo
CloseClipboard
MapWindowPoints
MessageBeep
AdjustWindowRectEx
RedrawWindow
LoadIconA
PostMessageA
ReleaseDC
GetTopWindow
DispatchMessageA
OffsetRect
PtInRect
SetCapture
GetCursorPos
GetFocus
DrawFrameControl
SetWindowPos
BeginPaint
RegisterWindowMessageA
SetWindowLongA
GetPropA
GetDC
EnableMenuItem
GetSysColorBrush
RegisterClassA
IsWindow
FillRect
UpdateWindow
IsRectEmpty
GetWindowPlacement
DestroyWindow
ShowWindow
DefFrameProcA
CallNextHookEx
IsIconic
GetWindow
DeleteMenu
PeekMessageA
EnableScrollBar
RegisterClipboardFormatA
DrawAnimatedRects
SetPropA
EnumWindows
GetMessagePos
DestroyIcon
IsDialogMessageW
GetDlgItem
CreateWindowExA
InvalidateRect
GetSubMenu
UnhookWindowsHookEx
CreateIcon
GetWindowLongA
GetMenuStringA
DrawIconEx
SetWindowPlacement
FrameRect
CharToOemA
ShowOwnedPopups
GetSysColor
GetMenu
GetLastActivePopup
SetTimer
InflateRect
CharNextA
ChildWindowFromPoint
KillTimer
IsDialogMessageA
SetMenuItemInfoA
GetKeyboardLayoutList
ScreenToClient
GetKeyboardState
GetWindowDC
LoadBitmapA
GetWindowLongW
SetWindowTextA
CallWindowProcA
TrackPopupMenu
DrawEdge
IntersectRect
CharLowerBuffA
IsWindowUnicode
ReleaseCapture
SetWindowsHookExA
GetActiveWindow
MessageBoxA
GetWindowThreadProcessId
IsZoomed
SetClassLongA
shell32
DragQueryFileA
SHGetFolderPathA
SHGetDiskFreeSpaceA
Sections
CODE Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 834B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ