Static task
static1
Behavioral task
behavioral1
Sample
ef6056a26e331fcf9ae6ae9a273166bed1789e5dd0f8854e2c111ae7ea19c4fa.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef6056a26e331fcf9ae6ae9a273166bed1789e5dd0f8854e2c111ae7ea19c4fa.dll
Resource
win10v2004-20220812-en
General
-
Target
ef6056a26e331fcf9ae6ae9a273166bed1789e5dd0f8854e2c111ae7ea19c4fa
-
Size
131KB
-
MD5
da6bfcb7acb897f1863515bd2a7837f6
-
SHA1
37eb4e85c619087ddf8a24cd2b60c3c713b43fc4
-
SHA256
ef6056a26e331fcf9ae6ae9a273166bed1789e5dd0f8854e2c111ae7ea19c4fa
-
SHA512
421d290d7579c1579fc0e1fcbe830456d2e27f897bf092444061f6bf33e8ea15491afee3c3b4a0c871693cee2de73c4e0fc837e34ba671cd43c1f03dfa9f6dcb
-
SSDEEP
3072:0ehdOuaWPlWEmqpZ7j8x4lJpe+Ox+bIijk6cl9zGdW:vbONWAEmq77gulJp+x+bNjjcHzGd
Malware Config
Signatures
Files
-
ef6056a26e331fcf9ae6ae9a273166bed1789e5dd0f8854e2c111ae7ea19c4fa.dll windows x86
fd4fbff25564df8cb721b12915701379
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapCreate
HeapSize
LCMapStringA
SetEvent
CreateFileA
msvcrt
__p__commode
__set_app_type
_cexit
srand
sscanf
strspn
time
_XcptFilter
user32
DrawIconEx
GetClassNameA
GetSubMenu
GetSystemMetrics
GetWindowPlacement
OffsetRect
TrackPopupMenuEx
TranslateMessage
DefMDIChildProcA
RedrawWindow
oleaut32
SafeArrayDestroy
SetErrorInfo
SysFreeString
SysReAllocString
SysStringLen
VarBstrCmp
RegisterTypeLi
shlwapi
PathBuildRootA
PathAppendA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA
SHQueryInfoKeyA
StrSpnA
StrStrIA
StrToIntA
SHDeleteEmptyKeyA
Sections
.text Size: 65KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ