Static task
static1
Behavioral task
behavioral1
Sample
efdecbc2f9c8ccbb98ab31e8c5f51ab3eca82cec760ddd71ada8ee0bad5c3854.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efdecbc2f9c8ccbb98ab31e8c5f51ab3eca82cec760ddd71ada8ee0bad5c3854.exe
Resource
win10v2004-20221111-en
General
-
Target
efdecbc2f9c8ccbb98ab31e8c5f51ab3eca82cec760ddd71ada8ee0bad5c3854
-
Size
275KB
-
MD5
70f8a6be40f28aa1f025300e9372faab
-
SHA1
0e3ce1cf7ce72e9f0107cda6f4474fbe6dad6cc8
-
SHA256
efdecbc2f9c8ccbb98ab31e8c5f51ab3eca82cec760ddd71ada8ee0bad5c3854
-
SHA512
e9b1905362c1a7a125fce195b89bbf2a2fa5b931a020369784c90b1ff9a17f6bba228b5832bb868e1919a10236276315b33773ba188c31e866245454d64c110a
-
SSDEEP
6144:6bUfizUexwncAGR/9x0ohvJNZx/KjcoeaPkH7z6xH4BHXFOYYH:VizUexscAGaavJNHithPnxHk3F9YH
Malware Config
Signatures
Files
-
efdecbc2f9c8ccbb98ab31e8c5f51ab3eca82cec760ddd71ada8ee0bad5c3854.exe windows x86
41afe6576b195db6c04c5d29f9288955
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
HeapSize
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
SetFilePointer
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
RtlUnwind
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
GetCPInfo
GetModuleFileNameW
GetStdHandle
WriteFile
CreateFileW
GetSystemTime
GetCurrentProcessId
CloseHandle
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetLastError
SetConsoleTitleA
ReadFile
HeapCreate
GetConsoleWindow
Sleep
GetConsoleTitleA
GetModuleFileNameA
GetProcessHeap
HeapFree
InterlockedDecrement
HeapAlloc
CreateFileA
ExitProcess
GetModuleHandleW
EncodePointer
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
LocalFree
lstrlenA
GetFileSize
user32
GetWindow
RegisterClassA
SetDlgItemTextA
LoadCursorA
FindWindowA
DestroyMenu
EnableWindow
UpdateWindow
EndPaint
PostQuitMessage
DrawTextW
DrawTextA
GetSubMenu
GetParent
LoadMenuA
LoadIconA
wsprintfA
GetWindowTextLengthA
SendMessageA
SetRectEmpty
BeginPaint
PtInRect
GetDC
GetClientRect
GetWindowTextA
InvalidateRect
GetWindowLongA
ReleaseDC
GetDlgItem
DefWindowProcA
SetWindowPos
LoadAcceleratorsA
ShowWindow
SetMenu
IsDlgButtonChecked
CheckRadioButton
SetWindowTextA
gdi32
FrameRgn
PatBlt
SetTextColor
CreateFontIndirectA
DeleteObject
SelectObject
SelectClipRgn
PolyDraw
DPtoLP
CombineRgn
SetMapMode
Rectangle
CreateFontW
CreateRectRgn
CreatePen
SetViewportExtEx
GetTextMetricsA
GetStockObject
CreateSolidBrush
TextOutA
CreateEllipticRgn
comdlg32
ReplaceTextA
FindTextA
GetOpenFileNameA
ole32
CoInitialize
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
SysFreeString
VariantInit
GetErrorInfo
SysAllocString
SysStringLen
VariantClear
VariantChangeType
winmm
mmioOpenA
mmioCreateChunk
mmioClose
mmioWrite
shlwapi
StrChrA
PathCompactPathA
StrToIntA
secur32
RevertSecurityContext
dnsapi
DnsQuery_W
DnsFree
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ