Static task
static1
Behavioral task
behavioral1
Sample
efafcaaac3984db85abf1af5f96323466ef9124d90d27cefb7268f0d2143b027.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
efafcaaac3984db85abf1af5f96323466ef9124d90d27cefb7268f0d2143b027.exe
Resource
win10v2004-20220812-en
General
-
Target
efafcaaac3984db85abf1af5f96323466ef9124d90d27cefb7268f0d2143b027
-
Size
432KB
-
MD5
e5b7ebb86eb0060613cfbf89fa43aff0
-
SHA1
51bf029098110bed285bf6d97b16be90839d6d36
-
SHA256
efafcaaac3984db85abf1af5f96323466ef9124d90d27cefb7268f0d2143b027
-
SHA512
263e11880ac9c4c6912fcb15bd235932f2b4ded6ee25f7bf0d5ce8e7ddf89777cd54c71846afb52c5a31595995bbf1bf462b20fc0d96484e2d1fff42435ed1ca
-
SSDEEP
12288:8kENKZ0M4tmFpHPGUh4/bL9Qr4iU1GwzWDLXYTSv:MVsfvm2WC/XMSv
Malware Config
Signatures
Files
-
efafcaaac3984db85abf1af5f96323466ef9124d90d27cefb7268f0d2143b027.exe windows x86
2388c5c120791899889cfc6f1a1b1f73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ExtractIconExA
SheChangeDirExW
SheGetDirA
RealShellExecuteExA
DragQueryPoint
kernel32
GetTimeFormatA
GetSystemTimeAsFileTime
GetFileType
HeapDestroy
SetEnvironmentVariableA
CreateSemaphoreA
lstrlenA
OpenSemaphoreA
ReadConsoleA
InitializeCriticalSection
HeapAlloc
WaitForDebugEvent
WriteConsoleW
DeleteCriticalSection
Sleep
GetLastError
RtlUnwind
GetStartupInfoW
IsValidLocale
GetProcAddress
CreateProcessW
GetVersionExW
TlsAlloc
SetVolumeLabelW
CreateFileA
SetStdHandle
WideCharToMultiByte
GetThreadPriority
HeapSize
GetDriveTypeA
VirtualQuery
GetCurrentProcessId
CompareStringA
SetUnhandledExceptionFilter
SetEndOfFile
VirtualAlloc
RaiseException
FillConsoleOutputAttribute
FlushFileBuffers
HeapFree
HeapValidate
QueryPerformanceCounter
CreateMutexA
CompareStringW
MultiByteToWideChar
FlushViewOfFile
TlsGetValue
GetDateFormatW
IsValidCodePage
FreeLibrary
GetACP
InterlockedIncrement
IsBadReadPtr
SetLastError
GetStringTypeExA
GetEnvironmentStringsW
OpenWaitableTimerA
WriteConsoleOutputA
LoadLibraryA
GetStdHandle
GetTickCount
lstrcmpi
LeaveCriticalSection
MoveFileW
EnumDateFormatsExA
GetTimeZoneInformation
GlobalFlags
GetCurrentThread
GetStringTypeA
GetCommandLineW
GetConsoleCP
ExitProcess
HeapReAlloc
ContinueDebugEvent
MapViewOfFileEx
GetStringTypeW
IsDebuggerPresent
GetModuleHandleA
GetStartupInfoA
GetConsoleScreenBufferInfo
GetLocaleInfoA
HeapCreate
InterlockedDecrement
LoadLibraryW
MoveFileExA
GetDateFormatA
EnterCriticalSection
VirtualFree
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GlobalAlloc
SetConsoleCtrlHandler
SetHandleCount
LCMapStringA
ResumeThread
GetOEMCP
GetLocaleInfoW
GetCurrentThreadId
EnumSystemLocalesA
GetConsoleOutputCP
GetPrivateProfileIntA
ReadFile
WriteConsoleA
GetCurrentProcess
GetNamedPipeHandleStateA
LCMapStringW
SetFilePointer
WriteFile
GetModuleFileNameA
SetConsoleWindowInfo
GetModuleHandleW
GetUserDefaultLCID
GetCommandLineA
TlsFree
FlushConsoleInputBuffer
GetCPInfo
UnhandledExceptionFilter
TlsSetValue
GetProcessHeap
ReadConsoleOutputCharacterW
GetCurrencyFormatA
GetCompressedFileSizeA
TerminateProcess
DebugBreak
OutputDebugStringA
CloseHandle
GetProfileSectionW
FreeEnvironmentStringsW
OutputDebugStringW
OpenMutexA
GetConsoleMode
wininet
ShowClientAuthCerts
InternetOpenA
InternetCombineUrlA
FtpPutFileW
InternetCheckConnectionA
InternetReadFileExW
comctl32
ImageList_Create
ImageList_Copy
ImageList_DragEnter
ImageList_GetFlags
DrawStatusTextW
CreateStatusWindow
InitCommonControlsEx
ImageList_SetDragCursorImage
CreateMappedBitmap
user32
IsCharAlphaNumericA
DlgDirListA
GetProcessWindowStation
SendNotifyMessageA
LookupIconIdFromDirectoryEx
GetPropW
CharPrevExA
GetDialogBaseUnits
IsCharUpperA
ChangeDisplaySettingsExW
GetScrollInfo
SetRectEmpty
SetPropA
GetInputDesktop
IsMenu
GetPropA
DdeCreateDataHandle
GetMessagePos
EnumChildWindows
EnumClipboardFormats
MessageBeep
CharPrevA
UnregisterClassW
ChangeMenuA
IsDialogMessageA
CreatePopupMenu
wsprintfW
SetMenu
PostThreadMessageA
FindWindowExA
SendMessageA
RegisterClassA
CreateMenu
ShowWindowAsync
VkKeyScanExA
RemoveMenu
DeferWindowPos
PostQuitMessage
CallWindowProcW
RegisterClassExA
GetMenuStringW
GetMenuContextHelpId
LoadImageA
SubtractRect
KillTimer
DlgDirSelectComboBoxExW
SetScrollPos
DestroyWindow
BroadcastSystemMessageA
GetKeyNameTextW
CharUpperBuffA
LoadCursorFromFileA
DeleteMenu
DragDetect
CreateWindowStationA
GetNextDlgGroupItem
DrawCaption
SetWindowLongW
SetProcessWindowStation
UnhookWindowsHookEx
LoadMenuIndirectW
CloseWindow
DestroyMenu
AppendMenuW
WindowFromPoint
SetThreadDesktop
comdlg32
GetSaveFileNameA
FindTextA
LoadAlterBitmap
GetOpenFileNameW
Sections
.text Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ