Static task
static1
Behavioral task
behavioral1
Sample
5ef732a1f3ee7623d62bb854e5a00c4395e06597f267cc8eeac225c9992e277e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5ef732a1f3ee7623d62bb854e5a00c4395e06597f267cc8eeac225c9992e277e.exe
Resource
win10v2004-20220812-en
General
-
Target
5ef732a1f3ee7623d62bb854e5a00c4395e06597f267cc8eeac225c9992e277e
-
Size
367KB
-
MD5
0e62ea4537bf385d298d516aeae65267
-
SHA1
9d7cd9596d5da2adac150749ce6026ec54ad4e18
-
SHA256
5ef732a1f3ee7623d62bb854e5a00c4395e06597f267cc8eeac225c9992e277e
-
SHA512
4936752823d2a013a2f7db2c624acde182018778f0fc5063c11d3f988a831eedccd68654284fcca885201bc3a358be33a72d42ec62379336f05529eb4be8eaa0
-
SSDEEP
6144:FkteyaJGVV7TNacJMuYLsdgOA8pMYrPkDd3w9CiJGLYcLonVAL:WfWsdhA8rr6NmCiwccEyL
Malware Config
Signatures
Files
-
5ef732a1f3ee7623d62bb854e5a00c4395e06597f267cc8eeac225c9992e277e.exe windows x86
d9a5f1acdc1814d22126ff339f14e8da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
BeginPaint
WindowFromPoint
EndPaint
SetWindowTextA
EnableWindow
gdi32
CreateCompatibleBitmap
CombineRgn
GetStockObject
CreateFontIndirectA
CreateColorSpaceA
DeleteObject
DeleteColorSpace
GetDeviceCaps
ole32
ProgIDFromCLSID
kernel32
GetEnvironmentStrings
InterlockedDecrement
lstrcmpiA
HeapCreate
SetFileAttributesA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetACP
GetLastError
HeapDestroy
GetFileType
GetStartupInfoA
HeapAlloc
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetTickCount
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ