Static task
static1
Behavioral task
behavioral1
Sample
efa34f458fdb40b69790d4384d13bd702755ebf4a8ddd221153eb53a54320940.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efa34f458fdb40b69790d4384d13bd702755ebf4a8ddd221153eb53a54320940.exe
Resource
win10v2004-20220901-en
General
-
Target
efa34f458fdb40b69790d4384d13bd702755ebf4a8ddd221153eb53a54320940
-
Size
329KB
-
MD5
64bd60d9ef4a27559ced59b487699688
-
SHA1
2c8a6ded5518a7bdc560bd229df02c9c5b99b0f0
-
SHA256
efa34f458fdb40b69790d4384d13bd702755ebf4a8ddd221153eb53a54320940
-
SHA512
8480445bd53a0fd68812d6b477539516789947a6ad30d6fa9742b08c0f2672cbd0e56339bc1374857ffdd03312b1a05dc0926740128fc0c1bdf5c50d59e8e644
-
SSDEEP
6144:e0l+gXiu9tcN2CVy0bTgwa0LlecMnmcCNRj/8aR5cij71cpu8xPyn1SXQyNHLFwt:eqZXOHxbTgn0Bv1cEj/8qXjKprCQAyVo
Malware Config
Signatures
Files
-
efa34f458fdb40b69790d4384d13bd702755ebf4a8ddd221153eb53a54320940.exe windows x86
ae9975b6c0d4e6d89356973d8d2fa663
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
CloseHandle
CompareFileTime
GlobalUnlock
GetModuleHandleA
WaitForSingleObject
HeapReAlloc
WaitForMultipleObjects
HeapCreate
SuspendThread
GetTickCount
GetStdHandle
GetAtomNameA
VirtualProtect
GetVersion
GetConsoleCP
InterlockedExchange
GetCommandLineA
SetConsoleCP
lstrlenA
GetSystemDefaultLangID
user32
SetPropA
GetKeyboardLayout
SetWindowPos
FillRect
CreateMenu
InvertRect
DragObject
DialogBoxParamA
FindWindowA
GetDlgItem
SetScrollInfo
InsertMenuA
DragDetect
DrawCaption
DispatchMessageA
IsDialogMessage
CreateIcon
DestroyMenu
GetCursorInfo
GetKeyState
winmm
PlaySoundA
auxSetVolume
auxGetVolume
CloseDriver
OpenDriver
version
VerQueryValueA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ