Static task
static1
Behavioral task
behavioral1
Sample
ef9fb782de436f82adb1abb81451f6f936a758a443ecd56aee527beb675d4a3e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef9fb782de436f82adb1abb81451f6f936a758a443ecd56aee527beb675d4a3e.exe
Resource
win10v2004-20221111-en
General
-
Target
ef9fb782de436f82adb1abb81451f6f936a758a443ecd56aee527beb675d4a3e
-
Size
307KB
-
MD5
b4b8da1e7dc36ef2c99c300db2a65bd0
-
SHA1
cb22398bce74743b86a99cb2cc58cc52fc801ade
-
SHA256
ef9fb782de436f82adb1abb81451f6f936a758a443ecd56aee527beb675d4a3e
-
SHA512
95cb8864ea954e83f72b54f03e432b1bc6c9820ae3345446ac1942113a84b6e70158f6dcc655469c16678253a7fa7f78c0bf71e5cb129265ea3b023511ffef71
-
SSDEEP
6144:IyGxr7rLrLrLrbrrrxB0pY4VE/RHn6OoGt+yKoUV7u6YhVdG+AbQuTsZR7i8ipxF:5Gxr7rLrLrLrbrrrxB0S4gn6iH0s7Pzb
Malware Config
Signatures
Files
-
ef9fb782de436f82adb1abb81451f6f936a758a443ecd56aee527beb675d4a3e.exe windows x86
b8e620ab52aa2c10da681c24e8a326d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetStringTypeW
InitializeCriticalSection
GetACP
GetConsoleAliasA
WriteConsoleW
SetCurrentDirectoryA
GetProcessHeap
CreateFileMappingW
CreateSemaphoreW
CreateMailslotA
DeviceIoControl
VirtualAlloc
InterlockedExchange
SetEnvironmentVariableA
DeleteFileA
GetModuleHandleA
FatalExit
CreatePipe
GetModuleHandleW
GetShortPathNameW
DeleteFileA
SetVolumeLabelA
mshtml
ShowModelessHTMLDialog
DllEnumClassObjects
ShowModalDialog
ShowHTMLDialog
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrs Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.afdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ