Static task
static1
Behavioral task
behavioral1
Sample
ef01be65be94a9bfc33235a38487d6b5e09367c6df8f1dfec534c6f139ed1d07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef01be65be94a9bfc33235a38487d6b5e09367c6df8f1dfec534c6f139ed1d07.exe
Resource
win10v2004-20220812-en
General
-
Target
ef01be65be94a9bfc33235a38487d6b5e09367c6df8f1dfec534c6f139ed1d07
-
Size
596KB
-
MD5
77381f5893b13170a48831c1ea74e01f
-
SHA1
dc7e99b06d471570a9ce86f4d74c2e754be85d83
-
SHA256
ef01be65be94a9bfc33235a38487d6b5e09367c6df8f1dfec534c6f139ed1d07
-
SHA512
826e0dd7d9c44264ebd621c0bb8263037e54c64d198d9baad36e24953b4ef4af3c989713295dcfec7cccfa1a49dbaaab1457655aa44a101f4054dbe45369b9f2
-
SSDEEP
12288:zlhLG7ec6aPTL5Vy7Zbbl4jfNddHTQY81FreQoGYoKjdA:jkeDcT/y7ZHlIfRUpyGYoiA
Malware Config
Signatures
Files
-
ef01be65be94a9bfc33235a38487d6b5e09367c6df8f1dfec534c6f139ed1d07.exe windows x86
26e3d92bfc767f657c473f8485b7a3aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
EnumChildWindows
gdi32
CreateCompatibleDC
comctl32
ord17
shell32
SHGetSpecialFolderLocation
tallylicui
SetProdName
ws2_32
WSACancelBlockingCall
ole32
CoCreateInstance
iphlpapi
GetTcpTable
oleaut32
VariantInit
netapi32
Netbios
wininet
InternetCanonicalizeUrlW
advapi32
RegQueryValueExA
version
GetFileVersionInfoSizeA
Sections
.text Size: 532KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vpcuqku Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE