Static task
static1
Behavioral task
behavioral1
Sample
ef3b64b9296c0869357dd3f70c4b236619eb715a070ed496e99fc961e428789f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef3b64b9296c0869357dd3f70c4b236619eb715a070ed496e99fc961e428789f.exe
Resource
win10v2004-20220812-en
General
-
Target
ef3b64b9296c0869357dd3f70c4b236619eb715a070ed496e99fc961e428789f
-
Size
139KB
-
MD5
1129c2b33a16007fd67c01f12bf52a90
-
SHA1
a479dbb76b0bedecc7e0e47b5022558478afdda8
-
SHA256
ef3b64b9296c0869357dd3f70c4b236619eb715a070ed496e99fc961e428789f
-
SHA512
d0e6306c3d1458ddd503f476635445dcaa3e08770df1a8f93b69a6f35f36ef3d1da1250d72cce69064e68a32d0baca57d41c0f8bddff01c7a00b842f6fa28796
-
SSDEEP
3072:wBJu2c88ElzYyNhZk1EJZf++pufHhzP9VFhccUERoGYG5Q08q5rN:gzYw5KthxfLUFlG5QW5r
Malware Config
Signatures
Files
-
ef3b64b9296c0869357dd3f70c4b236619eb715a070ed496e99fc961e428789f.exe windows x86
286c4a73c9ae31fbedb2b4e12f8feb6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToDosDateTime
FileTimeToLocalFileTime
CloseHandle
GetFileInformationByHandle
GetLastError
CreateFileA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
LocalAlloc
LocalFree
ReadFile
WriteFile
SetFilePointer
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
msvcrt
printf
toupper
_strnicmp
_stricmp
isdigit
atoi
exit
_vsnprintf
strrchr
free
_tempnam
strchr
rand
srand
time
strncpy
memmove
_getch
isspace
fclose
fgets
fopen
malloc
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE