Static task
static1
Behavioral task
behavioral1
Sample
ef646a7bb7024e671bcd06d2b85e3f340de4ec060038e85b91a5fcd4c55ef37e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef646a7bb7024e671bcd06d2b85e3f340de4ec060038e85b91a5fcd4c55ef37e.exe
Resource
win10v2004-20220812-en
General
-
Target
ef646a7bb7024e671bcd06d2b85e3f340de4ec060038e85b91a5fcd4c55ef37e
-
Size
206KB
-
MD5
58505f8257cd872a3ddc299ee75e46e0
-
SHA1
fbec901ede6c059d06aedb8285e849529cbe3d38
-
SHA256
ef646a7bb7024e671bcd06d2b85e3f340de4ec060038e85b91a5fcd4c55ef37e
-
SHA512
9abe9f77ff2c95207f02f776e294f37049480c1618bc957e2a75fc885a956ba725accae398e353933fc27a9a8b10bcab265a40f5a07dc5966224a45bd6626b44
-
SSDEEP
3072:GqelDQR7m0ODjFIh7FtO2Q5Y3YY8v6+jdfXylbySDjzDiyqxDvxDUNGSG8BRPBI6:LUQ8nFwWUNn+filbySDjpqQNGSGII6
Malware Config
Signatures
Files
-
ef646a7bb7024e671bcd06d2b85e3f340de4ec060038e85b91a5fcd4c55ef37e.exe windows x86
46c071411d2d5750eee22917d178f495
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetTempPathA
GetDateFormatA
AddConsoleAliasA
TerminateProcess
SetSystemPowerState
FindFirstChangeNotificationA
DeviceIoControl
GetConsoleTitleA
HeapFree
QueryDosDeviceA
OpenEventA
WriteConsoleOutputCharacterA
RtlMoveMemory
EnumResourceNamesA
VirtualAlloc
GetProcessShutdownParameters
CreateNamedPipeA
GlobalAddAtomA
GetLastError
DisconnectNamedPipe
advapi32
CredMarshalCredentialA
CredMarshalCredentialW
dplay
DirectPlayCreate
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ