Static task
static1
Behavioral task
behavioral1
Sample
ef7c8c00529e061531215d5e31bf1719b6ac7614526c5887f23e4a2ae949acb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef7c8c00529e061531215d5e31bf1719b6ac7614526c5887f23e4a2ae949acb6.exe
Resource
win10v2004-20221111-en
General
-
Target
ef7c8c00529e061531215d5e31bf1719b6ac7614526c5887f23e4a2ae949acb6
-
Size
16KB
-
MD5
569c08deedb63b81813b2fe0745a518d
-
SHA1
e94886b7a663df25ae3c831e624d2c428655a250
-
SHA256
ef7c8c00529e061531215d5e31bf1719b6ac7614526c5887f23e4a2ae949acb6
-
SHA512
6da72bf28ae4cbb193a30a4014e4d02447d41703a43ff1586bca9ed249be62d3153896d4a7175076df02e35021261c51cebb132b445597c1a7f239023fa0126c
-
SSDEEP
384:m2QDWflW4gKHFEIcViWq7/dt9sV6Cb5hbH:8DWfo4gKOIcVivzpsV3H
Malware Config
Signatures
Files
-
ef7c8c00529e061531215d5e31bf1719b6ac7614526c5887f23e4a2ae949acb6.exe windows x86
e0827e59dc4b7b4037b00d236941ec0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
IsDBCSLeadByte
SetEvent
GetExitCodeThread
CreateMutexA
ReleaseMutex
TlsFree
TlsGetValue
GetProcessHeap
GetThreadLocale
GetOEMCP
GlobalFindAtomA
GetConsoleCP
VirtualAlloc
GetModuleHandleA
GetShortPathNameA
GetUserDefaultLangID
GetStdHandle
CreatePipe
CompareStringA
CreateThread
user32
ShowWindow
GetWindowTextA
RegisterClassA
GetFocus
InvalidateRect
GetDC
IsWindowVisible
GetClassInfoExA
CloseWindow
GetWindow
ReleaseDC
ValidateRect
GetForegroundWindow
GetSystemMetrics
GetWindowTextLengthA
ReleaseDC
IsIconic
GetClassNameA
GetActiveWindow
shell32
SHChangeNotify
SHCreateShellItem
SHGetFileInfoA
SHBrowseForFolderA
SHGetFolderPathA
secur32
AcceptSecurityContext
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ