Static task
static1
Behavioral task
behavioral1
Sample
efa777f1be06fcab2d66e53e4dc816d62d191ba5c40fd8c793e84d403bdec024.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efa777f1be06fcab2d66e53e4dc816d62d191ba5c40fd8c793e84d403bdec024.exe
Resource
win10v2004-20221111-en
General
-
Target
efa777f1be06fcab2d66e53e4dc816d62d191ba5c40fd8c793e84d403bdec024
-
Size
11KB
-
MD5
ab60bb13ddc5943156ce7f36453ffd62
-
SHA1
e47df621486c4b2ce6534dee29c1c8971835558b
-
SHA256
efa777f1be06fcab2d66e53e4dc816d62d191ba5c40fd8c793e84d403bdec024
-
SHA512
203f98bb742987e65fa7e22d130c9be4f0d1fe12c46ab0a428e362647715bd14ef3fab180f0244c36ecf20f07bce218052ff52e4d0fad06f70148a60c8c6ebe4
-
SSDEEP
96:P9nHMdwnjxNNLz+KYUkHUBAlXms69vi/xPJsHV0xo61lpcwsB2Ymcn27:PRHMd5vjhMc/cw8
Malware Config
Signatures
Files
-
efa777f1be06fcab2d66e53e4dc816d62d191ba5c40fd8c793e84d403bdec024.exe windows x86
30a6fd9ef557e5bc4403342f021b6bbd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardLayout
shell32
ShellExecuteA
shlwapi
StrStrA
StrStrIA
kernel32
lstrcpyA
lstrcatA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE