Static task
static1
Behavioral task
behavioral1
Sample
ef73b1a03fa29bc1489f08ae3a03f4a492057cb71268d5e4519ad066c17eb69c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef73b1a03fa29bc1489f08ae3a03f4a492057cb71268d5e4519ad066c17eb69c.exe
Resource
win10v2004-20220812-en
General
-
Target
ef73b1a03fa29bc1489f08ae3a03f4a492057cb71268d5e4519ad066c17eb69c
-
Size
797KB
-
MD5
3fb5bc0d152c2f6bb5f97e88ad1b64b0
-
SHA1
802abf12609b3dcaafb0d7aaaf52ed58313fb657
-
SHA256
ef73b1a03fa29bc1489f08ae3a03f4a492057cb71268d5e4519ad066c17eb69c
-
SHA512
d6f949b6138077663a895d3d070d6555b4fbd1983b296c1cfffef1453850229d9c7019d81e95cc9963bdbc360986fe600cfd7734a2740356386b10ed27d9332f
-
SSDEEP
24576:rh8vQdlW3RiuN3AnoCUrMJ1LMvOP8KL+:rW53HQnGrMJ1LMvQL
Malware Config
Signatures
Files
-
ef73b1a03fa29bc1489f08ae3a03f4a492057cb71268d5e4519ad066c17eb69c.exe windows x86
2958bd00184c7ce481c08b32129e40fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CancelIo
FindResourceA
GetDriveTypeW
CreateMailslotW
GetLocaleInfoA
VirtualProtect
GetModuleHandleA
GetExitCodeThread
SetLastError
RemoveDirectoryA
FindClose
MapViewOfFile
HeapSize
GetFileAttributesA
ResetEvent
IsValidCodePage
GetProcessHeap
GetTickCount
CreateDirectoryA
GetFileAttributesA
IsBadWritePtr
user32
IsDialogMessageA
DispatchMessageA
wsprintfA
IsWindow
GetWindowLongW
PostMessageW
LoadCursorA
GetCapture
LoadImageW
GetWindowTextW
SetFocus
PeekMessageA
SetCursor
ipsmsnap
DllGetClassObject
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE