Static task
static1
Behavioral task
behavioral1
Sample
efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4.exe
Resource
win10v2004-20220812-en
General
-
Target
efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4
-
Size
301KB
-
MD5
04b1057e2795043a6a7681ac951c6506
-
SHA1
a174173bc54629f7a9d8972dfc0731c1e7916d3b
-
SHA256
efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4
-
SHA512
6491d63b64f42f2161ab17f3508f4344cbb7bb556030c4ac9301b1bbae6239581d197a7ad3377ab1949d95480f0c950e03ca14061ce5ca89a07d2cc3762ac77f
-
SSDEEP
6144:eMghXT2rtzWLM4DCAgdCNh4rhJBiWSnG85jI4:e7wyEdCD4rBSnGY
Malware Config
Signatures
Files
-
efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4.exe windows x86
cb17f62c5117328eecd2c4f5b86fb5f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
GetCurrentProcess
MoveFileA
CloseHandle
VirtualAlloc
DuplicateHandle
advapi32
CredMarshalCredentialW
opengl32
glHint
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ