Static task
static1
Behavioral task
behavioral1
Sample
effcb648086fab0d7d855bdcbd4d145a8eaef369d1d75ca932b701bfd8fe863d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
effcb648086fab0d7d855bdcbd4d145a8eaef369d1d75ca932b701bfd8fe863d.exe
Resource
win10v2004-20220812-en
General
-
Target
effcb648086fab0d7d855bdcbd4d145a8eaef369d1d75ca932b701bfd8fe863d
-
Size
169KB
-
MD5
33c2a4be337ab2fb6db53d8678d50c51
-
SHA1
1a93bba12f821fdae41656c0a723a44de41a877d
-
SHA256
effcb648086fab0d7d855bdcbd4d145a8eaef369d1d75ca932b701bfd8fe863d
-
SHA512
a134765736a49d0b3a60c744658336943fdd759a418f4bec19a21a47049ccbe3e087e282fa37726fcff3131a53d46b10ad5de47bcf0ce725867c44a19d373635
-
SSDEEP
3072:M3p8DrEtWh2nIR+tfICtUpX9AhMrOaiaejAqYWgRDno9U+BZix/agVWTyMoFha/:M3yv682YSf7CpahMM6NyDgVw4A
Malware Config
Signatures
Files
-
effcb648086fab0d7d855bdcbd4d145a8eaef369d1d75ca932b701bfd8fe863d.exe windows x86
46515376fcd16f200f13ced98c39e025
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFileInfoA
SHGetDesktopFolder
comdlg32
GetOpenFileNameA
GetFileTitleA
advapi32
RegQueryValueExA
GetLengthSid
user32
AdjustWindowRectEx
BeginPaint
CallNextHookEx
msvcrt
abs
acos
cos
version
VerFindFileA
kernel32
VirtualAlloc
VirtualAllocEx
GetFullPathNameA
LoadLibraryA
IsBadHugeReadPtr
GetModuleHandleW
lstrlenA
GetCommandLineA
ExitProcess
GetACP
ReadFile
SetEvent
GetUserDefaultLCID
GlobalAlloc
GetStringTypeW
ExitThread
HeapFree
GetLastError
FindResourceA
GetDiskFreeSpaceA
CloseHandle
GetVersionExA
GetOEMCP
SetLastError
GetCommandLineW
GetProcAddress
EnumCalendarInfoA
WideCharToMultiByte
Sleep
GetModuleHandleA
InitializeCriticalSection
GetCPInfo
comctl32
ImageList_Add
ImageList_Destroy
ole32
CoUninitialize
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 109KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ