Static task
static1
Behavioral task
behavioral1
Sample
efd217efca08cc960184f12d0436d4f914a962f859862f601d054721d106f801.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efd217efca08cc960184f12d0436d4f914a962f859862f601d054721d106f801.exe
Resource
win10v2004-20220812-en
General
-
Target
efd217efca08cc960184f12d0436d4f914a962f859862f601d054721d106f801
-
Size
61KB
-
MD5
8374f68f9a8fdc998ab991f6d9946c60
-
SHA1
fe4a285e71006ae1010108af53254f79c2c5bf12
-
SHA256
efd217efca08cc960184f12d0436d4f914a962f859862f601d054721d106f801
-
SHA512
4748d256191939a31397dfffe29a2d82cbc3e14b2eba7ac1213631312945f3c49349a5f6854890fcc6f7afbc555271e61f9750720a22c5e57a2ebf5eeae2b233
-
SSDEEP
1536:PJxEld0cN4opfR/sW5FbStuyGwGYFxL8:PJxviREWvbYnr8
Malware Config
Signatures
Files
-
efd217efca08cc960184f12d0436d4f914a962f859862f601d054721d106f801.exe windows x86
ea49f8f87fb6642d3abb77c01e1e0050
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFindFileNameW
wvnsprintfA
PathRemoveFileSpecW
PathMatchSpecW
StrCmpNIA
wvnsprintfW
StrStrW
StrCmpNIW
SHDeleteKeyA
wnsprintfA
wnsprintfW
PathCombineW
PathFileExistsW
advapi32
CryptAcquireContextW
CryptHashData
RegCloseKey
GetUserNameW
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
RegEnumKeyExA
RegQueryValueExA
DuplicateTokenEx
RegSetValueExA
RegDeleteValueA
user32
GetWindowThreadProcessId
OpenDesktopA
GetCursorPos
GetClipboardData
EndDialog
SendMessageA
PeekMessageA
MsgWaitForMultipleObjects
DrawIcon
ExitWindowsEx
GetDlgItemTextA
GetClassNameA
GetDlgItem
SetThreadDesktop
DispatchMessageA
kernel32
GetFileAttributesW
VirtualProtect
GetVersionExW
lstrlenA
GetTickCount
SetFilePointer
EnterCriticalSection
GetLocalTime
lstrcpynW
VirtualAlloc
GlobalLock
InitializeCriticalSection
CreateProcessW
ReleaseMutex
lstrcpyA
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE