Static task
static1
Behavioral task
behavioral1
Sample
ef5eafa9af3d18ab17e5febcfd1015615aa920b83f4e296a9c113d9abcf19cfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef5eafa9af3d18ab17e5febcfd1015615aa920b83f4e296a9c113d9abcf19cfb.exe
Resource
win10v2004-20220812-en
General
-
Target
ef5eafa9af3d18ab17e5febcfd1015615aa920b83f4e296a9c113d9abcf19cfb
-
Size
109KB
-
MD5
48cde2a1a788f7e634e6fa744cbf6d05
-
SHA1
5531538d419f3fe049ac006c23126e0a84463957
-
SHA256
ef5eafa9af3d18ab17e5febcfd1015615aa920b83f4e296a9c113d9abcf19cfb
-
SHA512
1856fc204a5d27ebd85e0d20281209040f280858db7365710fa1e031d07374d37cabb5abfe05e60f78a2f99a08d00f76060c2d59cb2efa8b0f177c8daa1aea3b
-
SSDEEP
1536:qkZ7MrBKJt0+FWs8WSVUNlqqhs7fwziH/g7HQ+KBGc3ZxKJqFOdWUNSuPM+V:JUYJtz0VmhS3o7HQ+KBG00q0KNA
Malware Config
Signatures
Files
-
ef5eafa9af3d18ab17e5febcfd1015615aa920b83f4e296a9c113d9abcf19cfb.exe windows x86
2f69999438a780bb465f9e67582c8bec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IntersectRect
IsDialogMessageA
UnhookWindowsHookEx
RegisterWindowMessageA
GetForegroundWindow
MessageBeep
DrawFrameControl
GetCursor
SetCapture
ReleaseCapture
DispatchMessageW
EndPaint
LoadStringA
SetWindowPlacement
CharLowerA
GetTopWindow
SetCursor
RemoveMenu
DestroyCursor
SetParent
SendMessageW
GetDC
GetKeyboardType
GetScrollInfo
SetWindowLongW
GetWindowThreadProcessId
ActivateKeyboardLayout
IsWindowEnabled
GetWindowRect
ole32
StgOpenStorage
CoGetContextToken
PropVariantClear
CoUninitialize
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoCreateInstanceEx
CoGetMalloc
kernel32
DeleteCriticalSection
WaitForSingleObject
LocalReAlloc
GetProcAddress
ExitThread
GetStringTypeW
MoveFileExA
lstrcpynA
GetOEMCP
ExitProcess
GetModuleHandleA
GetLastError
GetVersionExA
VirtualAlloc
LocalAlloc
advapi32
GetLengthSid
GetUserNameA
RegLoadKeyA
shell32
SHGetDiskFreeSpaceA
Shell_NotifyIconA
oleaut32
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayGetUBound
SysStringLen
shlwapi
SHEnumValueA
SHDeleteValueA
PathIsDirectoryA
version
VerQueryValueA
gdi32
SetTextColor
CreateBrushIndirect
GetClipBox
CreatePalette
SelectObject
SelectPalette
CreateBitmap
BitBlt
GetPixel
GetPaletteEntries
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE