Static task
static1
Behavioral task
behavioral1
Sample
efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9.exe
Resource
win10v2004-20221111-en
General
-
Target
efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9
-
Size
1.6MB
-
MD5
edba583f1dc93fb81750278507d21a56
-
SHA1
9777f04f51c292ae6943d093aae76dd5fab3c7ca
-
SHA256
efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9
-
SHA512
00087da125d6f041802287d2475cd30f41eedb09ebba001c55f0e08e89c2b5f865c7c38368f9f22cdd33e4d79b3d5bbac044126275122c2c872c2fdae724494a
-
SSDEEP
49152:b3kpPSVcsWAZpBjgO7HGZPL79fyaQtirOF:b3kpWcbAZpB7atH9fQt
Malware Config
Signatures
Files
-
efd98f1899a655601dface66665de85596a406396fa492725c4ad79764848ae9.exe windows x86
2af9e5a023e947727637f1789c440935
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
BeginDeferWindowPos
gdi32
GetPixel
msimg32
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
GetJobA
advapi32
RegOpenKeyExW
shell32
SHBrowseForFolderA
comctl32
_TrackMouseEvent
shlwapi
PathFindFileNameA
ole32
OleTranslateAccelerator
oleaut32
VarBstrFromDate
oledlg
ord8
odbc32
ord72
ws2_32
ntohs
imm32
ImmAssociateContext
gdiplus
GdipCreateBitmapFromStream
oleacc
CreateStdAccessibleObject
wininet
HttpQueryInfoA
winmm
PlaySoundA
Sections
.text Size: 1.6MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE