Static task
static1
Behavioral task
behavioral1
Sample
4efde27acfbe9242192d20709d67e799de0785fbfa7a13741813f3542caf8845.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4efde27acfbe9242192d20709d67e799de0785fbfa7a13741813f3542caf8845.exe
Resource
win10v2004-20221111-en
General
-
Target
4efde27acfbe9242192d20709d67e799de0785fbfa7a13741813f3542caf8845
-
Size
152KB
-
MD5
2cd1f8a96cced71ef9882e5717cae7d0
-
SHA1
d60d795b5f7424edcabd331d2556a7712fc6ce45
-
SHA256
4efde27acfbe9242192d20709d67e799de0785fbfa7a13741813f3542caf8845
-
SHA512
773a4706ad28302ffe40e111e923bd41c8f816b0450074ecb58d04021d175ea39c62d0e57ed9de3dc579a87f14265a2975b578912e010b2d6da8ac4a218d1df5
-
SSDEEP
3072:/PhgP032wOxvlMKBHpPw0aMCCO/hEX42hJXPOji+Hu6F+Ik3YPPNoeC:/LgvlDcMCCK2h5OjiIL+IkI+
Malware Config
Signatures
Files
-
4efde27acfbe9242192d20709d67e799de0785fbfa7a13741813f3542caf8845.exe windows x86
fdfdaba4fb5542197267a06d911b2e22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreW
FoldStringA
AreFileApisANSI
GetConsoleOutputCP
FindResourceExA
GlobalDeleteAtom
GetThreadLocale
GetNumberFormatW
lstrlenA
LoadLibraryExA
EscapeCommFunction
WriteFileGather
HeapDestroy
ScrollConsoleScreenBufferA
DebugBreak
GetPrivateProfileStringA
EnumCalendarInfoExA
SetConsoleTitleA
CreateEventW
CreateFileMappingW
GetUserDefaultLCID
GenerateConsoleCtrlEvent
_llseek
CreateDirectoryExA
lstrcmpiW
SetFilePointerEx
QueueUserWorkItem
DosDateTimeToFileTime
GetModuleHandleA
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
GetStringTypeW
VirtualFree
HeapCreate
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
user32
RemovePropA
GetTitleBarInfo
GetMenuStringA
SetForegroundWindow
GetUserObjectInformationA
GetScrollPos
GetLastInputInfo
GetKeyboardType
GetMessageA
SetDebugErrorLevel
GetClassInfoExW
IsWindowUnicode
IsRectEmpty
UnregisterDeviceNotification
BringWindowToTop
DdeUnaccessData
CharNextA
CreateWindowStationA
SetWindowRgn
CreateIconIndirect
DdeUninitialize
CharUpperBuffA
OpenDesktopA
CharUpperBuffW
LoadIconA
AnimateWindow
DrawTextExA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE