Static task
static1
Behavioral task
behavioral1
Sample
ef28e3022896def6d354826f2703233dd262ca0e64f9430ff40145a3fbff1291.exe
Resource
win7-20220812-en
General
-
Target
ef28e3022896def6d354826f2703233dd262ca0e64f9430ff40145a3fbff1291
-
Size
128KB
-
MD5
0ca00fe4cf8a61fd8d2ce6aea64e5d90
-
SHA1
cf21ae3a12a2a0e696cdd6620c9cde2c2715e5fd
-
SHA256
ef28e3022896def6d354826f2703233dd262ca0e64f9430ff40145a3fbff1291
-
SHA512
0b4bdb456079fa91087cbca9226b13e53072b616f822fd16d0062d27bb2b72a37c559efc965118149c5e2ef0453943886fcdabe0daa35484ed8a3ca96bf66566
-
SSDEEP
3072:6boyzktfdlfVwGfE9k5cKU+MfxI99wH/pCqFz4EcNs+fPi7:6boyYtTVDfukLUba9KHBCGcNs6PY
Malware Config
Signatures
Files
-
ef28e3022896def6d354826f2703233dd262ca0e64f9430ff40145a3fbff1291.exe windows x86
fafc3363ae40821ce4d3d42a2302d58f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
MultiByteToWideChar
lstrlenA
FreeLibrary
IsDBCSLeadByte
lstrcmpiA
lstrcpynA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
WideCharToMultiByte
lstrlenW
GetLastError
InitializeCriticalSection
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetProcAddress
LoadLibraryA
IsBadReadPtr
SetUnhandledExceptionFilter
RaiseException
VirtualQuery
GetSystemInfo
EnterCriticalSection
Sleep
GetCurrentThreadId
GetCommandLineA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
GetModuleFileNameA
SetEvent
VirtualProtect
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
RtlUnwind
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
HeapAlloc
HeapReAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
QueryPerformanceCounter
user32
SetWindowPos
CharNextA
GetMessageA
DispatchMessageA
IsWindow
SendMessageA
GetDesktopWindow
SetForegroundWindow
PostThreadMessageA
advapi32
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
ole32
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
oleaut32
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VarUI4FromStr
LoadTypeLi
SysFreeString
SysStringLen
LoadRegTypeLi
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE