Static task
static1
Behavioral task
behavioral1
Sample
ef8efc67da5837d7083a21aca4976e4746643abfebbf2e9ab95f98dfed1e66b6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef8efc67da5837d7083a21aca4976e4746643abfebbf2e9ab95f98dfed1e66b6.exe
Resource
win10v2004-20220901-en
General
-
Target
ef8efc67da5837d7083a21aca4976e4746643abfebbf2e9ab95f98dfed1e66b6
-
Size
160KB
-
MD5
0a46d65f51a00a684468d83fe55f5880
-
SHA1
f8ffb8ed9d550d255dbb7ed159a9658b7fa2b4cf
-
SHA256
ef8efc67da5837d7083a21aca4976e4746643abfebbf2e9ab95f98dfed1e66b6
-
SHA512
123d111a1c84e051c6a4679f9c16144b67185c181748182f9fc9333464c1b65275dd85d0dad0472332b4149a9d5e8151883db33e7eda5d9ccb7b51bac35d1d3f
-
SSDEEP
3072:DGyeT/ma/TMc1zwLvS+hYZ4z1sxtbjIUWnoRz:DG7T+Qwc1zPZ4zytbL
Malware Config
Signatures
Files
-
ef8efc67da5837d7083a21aca4976e4746643abfebbf2e9ab95f98dfed1e66b6.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE