Static task
static1
Behavioral task
behavioral1
Sample
7ef84df760a77fc6632ac82069530ea18a9f356bf94951d11bf2c5297e2f4341.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ef84df760a77fc6632ac82069530ea18a9f356bf94951d11bf2c5297e2f4341.exe
Resource
win10v2004-20220812-en
General
-
Target
7ef84df760a77fc6632ac82069530ea18a9f356bf94951d11bf2c5297e2f4341
-
Size
465KB
-
MD5
69e8f1c4b3895768e91d4a466f78bcb0
-
SHA1
42b8b8613db7462fde9d6d5c5a483033ece10969
-
SHA256
7ef84df760a77fc6632ac82069530ea18a9f356bf94951d11bf2c5297e2f4341
-
SHA512
6a099951e4dd3e828279629f3ad2b5a53434c74fbf9a8f01b512909a52fd789a371805dacaca69cd7303a088e1a015804519d1617e9519180903e134fae2019f
-
SSDEEP
12288:zQuawXWkQGWkLyZYrhRwngXdht5Uas4xELN3iNc:z4wmb1kLPr3wgLPU7gELxMc
Malware Config
Signatures
Files
-
7ef84df760a77fc6632ac82069530ea18a9f356bf94951d11bf2c5297e2f4341.exe windows x86
a00cb6a3d2199232c672434b6b235858
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwReplyPort
kernel32
GetSystemDefaultUILanguage
GetStringTypeExW
user32
GetInputState
GetMessagePos
Sections
.text Size: 458KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 250B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE