Static task
static1
Behavioral task
behavioral1
Sample
efbe99fa9221b7370456c607f144fef83846a7970ae9e0a1c714b6fde6368afe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
efbe99fa9221b7370456c607f144fef83846a7970ae9e0a1c714b6fde6368afe.exe
Resource
win10v2004-20221111-en
General
-
Target
efbe99fa9221b7370456c607f144fef83846a7970ae9e0a1c714b6fde6368afe
-
Size
4.0MB
-
MD5
6b024c047ca607f8f84d417ab7594078
-
SHA1
0f40d1610cbbf8705a9696dcbcb1cc536ddc208c
-
SHA256
efbe99fa9221b7370456c607f144fef83846a7970ae9e0a1c714b6fde6368afe
-
SHA512
d8fa0d27b36e707a59b384307436f066861f78a940e4c63fe1e62dfecd92a0aac24cc5999427bf068931c62e05a2565e23bc1ebcd2f653239de32c6b4528a1e0
-
SSDEEP
98304:HcW+0C63KTltV3Yl8kAhIT5mCCppysBx:HPC63qlnGZyIxGpLz
Malware Config
Signatures
Files
-
efbe99fa9221b7370456c607f144fef83846a7970ae9e0a1c714b6fde6368afe.exe windows x86
96da391b861be1286950153fe412bf8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
iphlpapi
GetAdaptersInfo
winmm
midiStreamStop
ws2_32
recvfrom
rasapi32
RasHangUpA
user32
ScrollWindowEx
gdi32
GetStockObject
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetOpenFileNameA
advapi32
OpenProcessToken
shell32
ShellExecuteA
ole32
CoTaskMemFree
oleaut32
VariantInit
comctl32
ImageList_EndDrag
oledlg
ord8
wldap32
ord29
wininet
InternetCloseHandle
Sections
.text Size: 3.9MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE