Static task
static1
Behavioral task
behavioral1
Sample
efbd7aed42fa46ccde7c4cad6b89f08b4a70b73bd19b59c713331b8f3ef29bb5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efbd7aed42fa46ccde7c4cad6b89f08b4a70b73bd19b59c713331b8f3ef29bb5.exe
Resource
win10v2004-20221111-en
General
-
Target
efbd7aed42fa46ccde7c4cad6b89f08b4a70b73bd19b59c713331b8f3ef29bb5
-
Size
59KB
-
MD5
1f8b2ef18d0326ae28a3f763f1379d94
-
SHA1
679d964fbdfdd871093bcd6fd8606db928f4dcf7
-
SHA256
efbd7aed42fa46ccde7c4cad6b89f08b4a70b73bd19b59c713331b8f3ef29bb5
-
SHA512
f0a29d17a4a3115dff2c0754f289cdd7792d64e754109b65c48d2c8e53da645f7a6bd2996d8ee459b2b11201d9bd31bedc6dfbb7d7ffec9136eed377bc813aaf
-
SSDEEP
1536:6vUIVALyox23fnLzSNn+hjbYsUGyoz7DUbM4bi:6vUIHo03zYn+NYKyM8i
Malware Config
Signatures
Files
-
efbd7aed42fa46ccde7c4cad6b89f08b4a70b73bd19b59c713331b8f3ef29bb5.exe windows x86
cd02157aee61baab4a3d389f39b7f334
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rpcrt4
UuidToStringA
shlwapi
SHSetValueA
msvcrt
_EH_prolog
user32
wvsprintfA
shell32
SHGetSpecialFolderLocation
ole32
CoInitialize
oleaut32
SysStringLen
Sections
.rdata Size: 55KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE