Static task
static1
Behavioral task
behavioral1
Sample
efc1eeac687de6025addc10a583dd8083c16b569737a79e748bcda7374e959ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efc1eeac687de6025addc10a583dd8083c16b569737a79e748bcda7374e959ff.exe
Resource
win10v2004-20220812-en
General
-
Target
efc1eeac687de6025addc10a583dd8083c16b569737a79e748bcda7374e959ff
-
Size
58KB
-
MD5
820d5f23cc556f80cbf7142face77920
-
SHA1
3b397057caf4fbcd4be27e1e65dd6049ea481677
-
SHA256
efc1eeac687de6025addc10a583dd8083c16b569737a79e748bcda7374e959ff
-
SHA512
6949b65ecff6ff8041125b16b6cf8222cd1b193f9f9e9a25d11595e97ce5e7dea9a2b1d5abed03143377bc4d4f44fc8b910d65632f06e719f6fbb2f128645962
-
SSDEEP
768:RGFKU8TKt59ekoC1tdvvEfmZ/M5zZc0+jrVty8xGhTCktUSVHCmwFXzEd03bdOUm:RaK2b9ekXv45zZGYCktnVHVwVzEd0LI
Malware Config
Signatures
Files
-
efc1eeac687de6025addc10a583dd8083c16b569737a79e748bcda7374e959ff.exe windows x86
08634f3f0f5f51256ab292452c85dde8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CMP_Init_Detection
CMP_RegisterNotification
CMP_Report_LogOn
CMP_UnregisterNotification
CMP_WaitNoPendingInstallEvents
CMP_Init_Detection
CMP_RegisterNotification
CMP_Report_LogOn
CMP_UnregisterNotification
CMP_WaitNoPendingInstallEvents
CMP_Init_Detection
CMP_RegisterNotification
CMP_Report_LogOn
CMP_UnregisterNotification
CMP_WaitNoPendingInstallEvents
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
CMP_Init_Detection
kernel32
VirtualAlloc
GetWindowsDirectoryA
TlsFree
GetDiskFreeSpaceA
CreateFileA
FindClose
GetACP
_lread
TlsFree
TlsFree
FindFirstVolumeW
GetConsoleTitleA
GlobalFree
DeleteAtom
GetVolumePathNameA
DuplicateHandle
EncodePointer
GlobalFree
AttachConsole
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
Sections
.text Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE