Static task
static1
Behavioral task
behavioral1
Sample
efa36c1dab86b1133f0140c6ff4a0a5a1cea7eb98938183b44f6ea2983c28c56.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efa36c1dab86b1133f0140c6ff4a0a5a1cea7eb98938183b44f6ea2983c28c56.exe
Resource
win10v2004-20220812-en
General
-
Target
efa36c1dab86b1133f0140c6ff4a0a5a1cea7eb98938183b44f6ea2983c28c56
-
Size
76KB
-
MD5
7b4ed09fec80f953cd023960f721ce1f
-
SHA1
0da3a31fde3ee02d627715e7663c1724fec4f64a
-
SHA256
efa36c1dab86b1133f0140c6ff4a0a5a1cea7eb98938183b44f6ea2983c28c56
-
SHA512
a098c157871151574d5b1588377c385e9f22895c3fd72e94840baf21d9872b804288b552e08369f2f76ba940c9a00bd64fcefce956f1dfedbb5e55aa86e1fa2b
-
SSDEEP
1536:w5bLpwqbqFVsNo2q1TRT1jJt/DXjEErxTWDTMqhGKYIZTET8x:wxLpZb6CqTRJjXjBkMqhGKZTbx
Malware Config
Signatures
Files
-
efa36c1dab86b1133f0140c6ff4a0a5a1cea7eb98938183b44f6ea2983c28c56.exe windows x86
5c4374396350af0624569ca8c68782cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
CreateSocketHandle
IsBadCodePtr
lstrlen
CreateNamedPipeW
GetConsoleAliasW
SetConsoleCommandHistoryMode
WriteConsoleA
ConvertThreadToFiber
FindFirstFileExA
SetHandleInformation
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE