Static task
static1
Behavioral task
behavioral1
Sample
efb486f0372371d1be5ed787a2f4b0f6dd76fac911fa9cb1f3f0ceb0359f55ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efb486f0372371d1be5ed787a2f4b0f6dd76fac911fa9cb1f3f0ceb0359f55ff.exe
Resource
win10v2004-20220812-en
General
-
Target
efb486f0372371d1be5ed787a2f4b0f6dd76fac911fa9cb1f3f0ceb0359f55ff
-
Size
70KB
-
MD5
6f2b32261246e3a16aff6f1f9d36d890
-
SHA1
9e40a0a38bbe8249f5d612a383b2ff9c8049c3f5
-
SHA256
efb486f0372371d1be5ed787a2f4b0f6dd76fac911fa9cb1f3f0ceb0359f55ff
-
SHA512
bac4caed987518a8f146bfc6d9b536baf537d58a5e1089cde9c3fcee1987967349e280c3467fd798402275ee1ca8f306189a0f934405fbc8b46dde958501bec7
-
SSDEEP
1536:Yhfn8CUldADexv6+JUEbooPRrKKRBXBm:afn8CSdsAi+JltZrpRBX
Malware Config
Signatures
Files
-
efb486f0372371d1be5ed787a2f4b0f6dd76fac911fa9cb1f3f0ceb0359f55ff.exe windows x86
3391024d27d801b58b270449bd4b8c2c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetStartupInfoW
VirtualAllocEx
user32
LoadIconW
LoadIconA
gdi32
RealizePalette
SelectPalette
GetStockObject
advapi32
RegOpenKeyW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataR Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE