Static task
static1
Behavioral task
behavioral1
Sample
ef978044a168eb0bb75e6a24f40c9b733904809fda0802c19dddac9297821856.exe
Resource
win7-20220812-en
General
-
Target
ef978044a168eb0bb75e6a24f40c9b733904809fda0802c19dddac9297821856
-
Size
111KB
-
MD5
838c6faec7d38ad166e7602d2093e390
-
SHA1
64b62711af23d699a679deef57e6557b30e6c095
-
SHA256
ef978044a168eb0bb75e6a24f40c9b733904809fda0802c19dddac9297821856
-
SHA512
aca4993cff10c35c8b6a24ab4322b8022bdc6c7ad7267bef0c4b3966666c3be1e49a9f6097f20285df496c35b5dfc10e955783fda0cdd36ba2b09fe550ded5b9
-
SSDEEP
1536:4wjuvvQZx2lNaxg7YM1KEx2ERjObmheOE8AQ0d2M9yTAVW4:Tu3QZx0NaxwYMLx2ERqbmfvN0dz9yT6
Malware Config
Signatures
Files
-
ef978044a168eb0bb75e6a24f40c9b733904809fda0802c19dddac9297821856.exe windows x86
4803607f0561f618d58c6e43d6c3d627
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
msvcrt
_exit
_XcptFilter
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_cexit
tolower
wprintf
wcschr
exit
iswprint
__wgetmainargs
wcsrchr
vwprintf
__iob_func
fflush
ole32
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitializeEx
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupCopyOEMInfW
SetupDiGetClassDevsW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE