Static task
static1
Behavioral task
behavioral1
Sample
ef06f1c7d812cba553f6f0156725bb57e5366b3f4bd3951f4ec47c082276b935.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef06f1c7d812cba553f6f0156725bb57e5366b3f4bd3951f4ec47c082276b935.exe
Resource
win10v2004-20221111-en
General
-
Target
ef06f1c7d812cba553f6f0156725bb57e5366b3f4bd3951f4ec47c082276b935
-
Size
75KB
-
MD5
019baae98af1f0ed8aa128f51fcfd962
-
SHA1
fd291b535e67238b928eab33a09bc728c229d409
-
SHA256
ef06f1c7d812cba553f6f0156725bb57e5366b3f4bd3951f4ec47c082276b935
-
SHA512
8b65e95dfcded599991013e38c0ce4c6211670bbb1bcf390a0b625a9fa98d1753fd9eff165851b3cdef5a55a1643a075a5e9f22b723565b280dc6f9e1d118382
-
SSDEEP
1536:VuDX+KtdOSQFNKMrGgzlIU54oIFHBRHdMWkFJnALuPKrrnBseJs0:8nOSQFNKSGg5F4oIFhRHMSjrBtJs0
Malware Config
Signatures
Files
-
ef06f1c7d812cba553f6f0156725bb57e5366b3f4bd3951f4ec47c082276b935.exe windows x86
3decabcde8e1c82f56492713d21e1976
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
WritePrivateProfileStringW
CreateTimerQueueTimer
UnmapViewOfFile
CreateActCtxA
TryEnterCriticalSection
SetConsoleCursorMode
VirtualAllocEx
TerminateThread
ProcessIdToSessionId
ScrollConsoleScreenBufferA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 61KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE