Static task
static1
Behavioral task
behavioral1
Sample
efcb6e3b6e78460515b73105dc14ea7ba0fb2eb63dca197a167975034e111794.exe
Resource
win7-20220812-en
General
-
Target
efcb6e3b6e78460515b73105dc14ea7ba0fb2eb63dca197a167975034e111794
-
Size
340KB
-
MD5
fe6cad7271d576b10920c5b350b63529
-
SHA1
2155029e545b35e2dcd9a97e3cc7600a257724b6
-
SHA256
efcb6e3b6e78460515b73105dc14ea7ba0fb2eb63dca197a167975034e111794
-
SHA512
d416a15aa4b89b2c361a623aa6134d75de0dfdc44fedb3664de792cb83c88d375a3f315e27e92504e4bdc818361a5335085136cc876fe09e8459b0bd70a34572
-
SSDEEP
6144:csordhillmFDD+MWTF5n+IGqn+KjT7lKocjS4PM9Vdzt5zpcHCoiPm:csordklmFDD+Nn+IhQocRM3drzyHCpe
Malware Config
Signatures
Files
-
efcb6e3b6e78460515b73105dc14ea7ba0fb2eb63dca197a167975034e111794.exe windows x86
8afd8eacc22113d3a078006bca6c8c3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
LCMapStringA
CloseHandle
CreateFileA
user32
SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA
advapi32
RegOpenKeyA
RegCreateKeyA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegDeleteValueA
Sections
.text Size: 320KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ