Static task
static1
Behavioral task
behavioral1
Sample
ef6a65b9ee3136bd8897dbe6f06724196a42b826c2961f6f7372da6b59bb3ed5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef6a65b9ee3136bd8897dbe6f06724196a42b826c2961f6f7372da6b59bb3ed5.exe
Resource
win10v2004-20220812-en
General
-
Target
ef6a65b9ee3136bd8897dbe6f06724196a42b826c2961f6f7372da6b59bb3ed5
-
Size
276KB
-
MD5
6478b780aeacef88270125b50884dfec
-
SHA1
89fec273a3e7eb6b612b592be44d42e7fbbbe8ed
-
SHA256
ef6a65b9ee3136bd8897dbe6f06724196a42b826c2961f6f7372da6b59bb3ed5
-
SHA512
27f18b2156f1dc7e6b41316b83df1fdbc837c3cab5955031236b3d3f92bc386a70db940269d97fd9c7de2295033ba646e105242573f201c0f1596b35317f25a1
-
SSDEEP
6144:MK5G2f/qVQSmyZu/P4F8SURaXLQFDB4k6Tw:MciFmyZqg2SgaUVBg
Malware Config
Signatures
Files
-
ef6a65b9ee3136bd8897dbe6f06724196a42b826c2961f6f7372da6b59bb3ed5.exe windows x86
3b11e29f82ba4fce3dfbef171b3b2bc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
ResetEvent
DeleteFileA
LocalFree
CreateSemaphoreA
GetCommandLineA
GetUserDefaultLangID
GetCurrentProcessId
SuspendThread
ResumeThread
FatalExit
DebugBreak
GetWindowsDirectoryA
CreateMutexA
GetVersionExA
advapi32
GetUserNameA
user32
DispatchMessageA
GetWindow
BeginPaint
CloseWindow
GetClassInfoExA
WaitMessage
SetDoubleClickTime
ShowWindow
GetFocus
ReleaseCapture
IsWindowVisible
GetDialogBaseUnits
EndMenu
GetMessageA
ntdll
memcpy
gdi32
MoveToEx
GdiFlush
shlwapi
SHReleaseThreadRef
ws2_32
WSACleanup
gethostbyname
Sections
.text Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ