Static task
static1
Behavioral task
behavioral1
Sample
efddcc1e81fd5672120fb180512efcc2174407dd7cf732851b10ea9d674d87cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efddcc1e81fd5672120fb180512efcc2174407dd7cf732851b10ea9d674d87cc.exe
Resource
win10v2004-20220812-en
General
-
Target
efddcc1e81fd5672120fb180512efcc2174407dd7cf732851b10ea9d674d87cc
-
Size
79KB
-
MD5
5ea4c627132f10cf4bd5076e04fcf8af
-
SHA1
d001302122643c32f420b258cedfedc18cb885f7
-
SHA256
efddcc1e81fd5672120fb180512efcc2174407dd7cf732851b10ea9d674d87cc
-
SHA512
a60360a86f9ddd6f50e73bad5cdaf971bb55e818d73b44e1913df9e54dd547e8bf255ef460e4c1b77a1084ff1b7270814292f2601fab594f5662434723e9cb5d
-
SSDEEP
1536:9+00rKCYZaQLuNB0Ys7XV1H8Ucy9i0QXM:N0uC1WaKYs7XV1R95Q
Malware Config
Signatures
Files
-
efddcc1e81fd5672120fb180512efcc2174407dd7cf732851b10ea9d674d87cc.exe windows x86
fe0dc00eb6a990af935421e18090023e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
Imports
duser
AddGadgetMessageHandler
AddGadgetMessageHandler
AttachWndProcA
AttachWndProcW
AutoTrace
DUserCastDirect
BuildAnimation
BuildDropTarget
BuildInterpolation
CreateAction
AddGadgetMessageHandler
AttachWndProcA
AttachWndProcW
AutoTrace
DUserCastDirect
BuildAnimation
BuildDropTarget
BuildInterpolation
CreateAction
kernel32
GetLastError
_lopen
GetEnvironmentVariableA
GetACP
CreateDirectoryA
IsBadCodePtr
GetTempPathW
InterlockedDecrement
_lwrite
FreeLibrary
ReadFile
GetLastError
_lopen
GetEnvironmentVariableA
GetACP
CreateDirectoryA
IsBadCodePtr
GetTempPathW
InterlockedDecrement
_lwrite
FreeLibrary
ReadFile
CreateDirectoryA
IsBadCodePtr
GetTempPathW
InterlockedDecrement
_lwrite
FreeLibrary
ReadFile
mapi32
BMAPIAddress
BMAPIDetails
BMAPIFindNext
BMAPIGetAddress
BMAPIAddress
BMAPIDetails
BMAPIFindNext
BMAPIGetAddress
Sections
.text Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ