Static task
static1
Behavioral task
behavioral1
Sample
ef7dc1b61660664619d49a55e3c40b02ef4a23d7e1e3ecd33b0fcf0ad4a90da1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef7dc1b61660664619d49a55e3c40b02ef4a23d7e1e3ecd33b0fcf0ad4a90da1.exe
Resource
win10v2004-20220901-en
General
-
Target
ef7dc1b61660664619d49a55e3c40b02ef4a23d7e1e3ecd33b0fcf0ad4a90da1
-
Size
216KB
-
MD5
11bda24cc4e19c541920134e51876ab8
-
SHA1
4f2074f4c937b18f4585bab49a5bbdad38f1e9a8
-
SHA256
ef7dc1b61660664619d49a55e3c40b02ef4a23d7e1e3ecd33b0fcf0ad4a90da1
-
SHA512
d65a8be196d0136647ee774fa0ee18c274e74c40736a7e42f61d37401b8e2ca6c7fee93249a9d0e54b23fc43d3da557052594c1a2c0c50c73742a1fc0c9f6e52
-
SSDEEP
6144:wVPZ5XI8NKUPuwyvFz/rIwwBrHghSbGq:OPZ5Y84UWJruBrAhS
Malware Config
Signatures
Files
-
ef7dc1b61660664619d49a55e3c40b02ef4a23d7e1e3ecd33b0fcf0ad4a90da1.exe windows x86
0699587cc24c2b61d8e953741b7edfea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
lstrcatA
GetModuleFileNameA
GetFileAttributesA
lstrcpynA
lstrlenA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
CreateFileW
VirtualAllocEx
user32
LoadIconA
LoadCursorA
EndPaint
PostQuitMessage
DefWindowProcA
gdi32
GetStockObject
CreateEnhMetaFileA
MoveToEx
LineTo
CloseEnhMetaFile
DeleteEnhMetaFile
advapi32
RegOpenKeyExA
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data7 Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data9 Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data8 Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ