Static task
static1
Behavioral task
behavioral1
Sample
ef4dcb64ebfee2bd1c4ed226538008298923b0ce6c6d567efd7d1e3cc34c3e6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef4dcb64ebfee2bd1c4ed226538008298923b0ce6c6d567efd7d1e3cc34c3e6c.exe
Resource
win10v2004-20220812-en
General
-
Target
ef4dcb64ebfee2bd1c4ed226538008298923b0ce6c6d567efd7d1e3cc34c3e6c
-
Size
208KB
-
MD5
066c4c5cb1a446a13525e76317a3b927
-
SHA1
5bad9d1e9aafe226aa8e30841839e71aa5eee826
-
SHA256
ef4dcb64ebfee2bd1c4ed226538008298923b0ce6c6d567efd7d1e3cc34c3e6c
-
SHA512
32e80c1947ca35b14503d7155d184caef4a4d33f18cb9464406a522a8028e35c60b6db5e1e93d21717040433267b140e2b01762f2263238afda5dfc5d6714078
-
SSDEEP
3072:gC8b+vmmsd1jcDQT1RNWxzeJnSVr8OX72FiZCW7wd+xoC/YDJguOs6DwcbpSPDn:gC8b0mdjWxzMnGr5akZvIcQ6DTyDn
Malware Config
Signatures
Files
-
ef4dcb64ebfee2bd1c4ed226538008298923b0ce6c6d567efd7d1e3cc34c3e6c.exe windows x86
33c29dd96ca0b7c78b586758143cebb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
comctl32
ord17
comdlg32
GetOpenFileNameA
GetSaveFileNameA
user32
MessageBoxIndirectA
GetWindowLongA
GetMessageTime
CheckMenuRadioItem
GetWindowTextLengthA
GetWindowTextA
GetDlgItemInt
SetDlgItemInt
LoadIconA
CreateMenu
AppendMenuA
SetMenu
EnableMenuItem
ShowWindow
PostMessageA
EnableWindow
DialogBoxParamA
SetActiveWindow
SetForegroundWindow
GetDesktopWindow
GetWindowRect
MoveWindow
EndDialog
GetForegroundWindow
GetCapture
GetClipboardOwner
GetQueueStatus
GetCursorPos
MessageBoxA
GetDlgItem
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
CheckRadioButton
WinHelpA
SetWindowLongA
MessageBeep
SendDlgItemMessageA
CreateWindowExA
SetWindowPos
SendMessageA
GetClientRect
MapDialogRect
kernel32
HeapSize
RtlUnwind
InterlockedExchange
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
SetFilePointer
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
FlushFileBuffers
GetCPInfo
GetLocaleInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LoadLibraryA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetCommandLineA
GetStartupInfoA
GetLastError
GetDateFormatA
GetTimeFormatA
TerminateProcess
GetModuleHandleA
GetProcAddress
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetCurrentDirectoryA
SetCurrentDirectoryA
GetVersionExA
GetSystemTimeAdjustment
GetSystemTime
GetProcessTimes
GetCurrentProcess
GetThreadTimes
GetCurrentThread
GlobalMemoryStatus
QueryPerformanceCounter
GetTickCount
FindClose
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
CreateThread
GetModuleFileNameA
GetEnvironmentVariableA
CloseHandle
ReadFile
CreateFileA
WriteFile
GetLocalTime
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE