Static task
static1
Behavioral task
behavioral1
Sample
efbcad838318bfd2ee4ca9c774f5924b7e776d03cc31f00cfb137510af27b24c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efbcad838318bfd2ee4ca9c774f5924b7e776d03cc31f00cfb137510af27b24c.exe
Resource
win10v2004-20220812-en
General
-
Target
efbcad838318bfd2ee4ca9c774f5924b7e776d03cc31f00cfb137510af27b24c
-
Size
144KB
-
MD5
9016312a79da560ab76d05fe54073000
-
SHA1
54cd670e824453186a12856ab5d03b392311255b
-
SHA256
efbcad838318bfd2ee4ca9c774f5924b7e776d03cc31f00cfb137510af27b24c
-
SHA512
febddb320bf72a372d2c3d18401cc7b9064456c901c2cd771df1a9411744328a61b27364e6b25d8664a24624201974da81c37c39a6f0dddf4a6192ed00bf5684
-
SSDEEP
3072:cNI8mwCBED+tyaGOCpuPHs2qmRlixXaKa0qMW2pVol3IFEyKwLR:OI8mw0JYFOCpu//wguJpVopIh
Malware Config
Signatures
Files
-
efbcad838318bfd2ee4ca9c774f5924b7e776d03cc31f00cfb137510af27b24c.exe windows x86
1aa8d42d139ed209e70bd84299041978
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFileGather
AddConsoleAliasA
AddAtomW
WaitNamedPipeA
GetProfileStringA
GetConsoleTitleA
GetCurrencyFormatA
GetNlsSectionName
LCMapStringW
GetMailslotInfo
EnumCalendarInfoExW
LocalAlloc
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE