Static task
static1
Behavioral task
behavioral1
Sample
efa9ac566b95c1b3647a7e738687ddaf7c63947eec4aea406a4f036435adee85.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efa9ac566b95c1b3647a7e738687ddaf7c63947eec4aea406a4f036435adee85.exe
Resource
win10v2004-20220812-en
General
-
Target
efa9ac566b95c1b3647a7e738687ddaf7c63947eec4aea406a4f036435adee85
-
Size
685KB
-
MD5
9e9a5d1419c2d88cac10e57ef24ef7ab
-
SHA1
8e36592fdf83352e5b2a0daa0b5c7934be603938
-
SHA256
efa9ac566b95c1b3647a7e738687ddaf7c63947eec4aea406a4f036435adee85
-
SHA512
615ee3f06f5873492e98f4afc48fbf5f678e9311ac31be45148da1da40a84a52d4b0ac3155892df382f2412a580e8940d406b14d8f66d87916c6f537fcebbe53
-
SSDEEP
6144:xgCPdAJ50G34IWwTdidusPQYPCVyOL1O5DpKoS+0Feo0xuIwtST+TVPTSAD6RVh/:xHCzRmdtJEJLMDpc+WIuxpPGAAoi1
Malware Config
Signatures
Files
-
efa9ac566b95c1b3647a7e738687ddaf7c63947eec4aea406a4f036435adee85.exe windows x86
65954865e97ed9c9fd9a11c4bb36a3b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
powrprof
SetActivePwrScheme
pdh
PdhGetFormattedCounterValue
psapi
GetModuleFileNameExA
version
GetFileVersionInfoSizeA
shfolder
SHGetFolderPathA
user32
PostQuitMessage
gdi32
GetViewportExtEx
comdlg32
ChooseColorA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
DragQueryFileA
comctl32
ImageList_GetIcon
oledlg
ord8
ole32
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
VarDateFromStr
Sections
.text Size: 270KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 414KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE