Static task
static1
Behavioral task
behavioral1
Sample
ef5dce461a26dcea829ba695a92c35f5b2853922902016aced4d079d2b63ca12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef5dce461a26dcea829ba695a92c35f5b2853922902016aced4d079d2b63ca12.exe
Resource
win10v2004-20220812-en
General
-
Target
ef5dce461a26dcea829ba695a92c35f5b2853922902016aced4d079d2b63ca12
-
Size
347KB
-
MD5
33eace8f6a16c458851b85797f4b1c48
-
SHA1
4e76fb62013be02997940d8ac9efa9a23cae9759
-
SHA256
ef5dce461a26dcea829ba695a92c35f5b2853922902016aced4d079d2b63ca12
-
SHA512
014a7bd159ce10e52c7cea27d2c7a08d9eb50c2f22a1365a9d6a13107b69a1bc57b088d3d3be32ad29fc75fedad6815dd64a8ebe893c3bdf2c3e4a2333b41dce
-
SSDEEP
6144:UlqBOXRd364FINRpav+A/gVCTfGNEe1ZOhDQm0rcTXAYGmY4hW:UlqBOTjINRpav+AgsjhQmDTXAYG74
Malware Config
Signatures
Files
-
ef5dce461a26dcea829ba695a92c35f5b2853922902016aced4d079d2b63ca12.exe windows x86
27f34839a9e66fc78b4c02643b649eb7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcessHeap
IsDebuggerPresent
GetCommandLineA
GetCommandLineW
GetCPInfo
SetStdHandle
HeapAlloc
GetLastError
IsValidCodePage
UnhandledExceptionFilter
WaitForSingleObject
ExitProcess
FindFirstFileW
CreateThread
InitializeCriticalSection
GetCurrentProcess
GetVersion
SetConsoleCP
GetOEMCP
TerminateProcess
GetLocalTime
InterlockedCompareExchange
GetModuleHandleA
GetCurrentThreadId
GetTempPathA
GetFileSize
FreeEnvironmentStringsW
GetACP
GetStartupInfoA
VirtualProtect
GetSystemTimeAsFileTime
user32
OpenClipboard
GetMessagePos
DestroyIcon
DestroyWindow
OffsetRect
msvcrt
_adjust_fdiv
??3@YAXPAX@Z
advapi32
RegQueryValueExA
RegOpenKeyExW
lz32
LZDone
ole32
CoMarshalHresult
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 288KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ