Static task
static1
Behavioral task
behavioral1
Sample
ebfc1c7916a27ca3ddb5b7910583c6393caa0d94964d922ee955ef314efd3a71.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebfc1c7916a27ca3ddb5b7910583c6393caa0d94964d922ee955ef314efd3a71.exe
Resource
win10v2004-20221111-en
General
-
Target
ebfc1c7916a27ca3ddb5b7910583c6393caa0d94964d922ee955ef314efd3a71
-
Size
30KB
-
MD5
996311dced40a3700fd4bc08a920f774
-
SHA1
633e25797b78fa3072ad7540e9581790f73348fc
-
SHA256
ebfc1c7916a27ca3ddb5b7910583c6393caa0d94964d922ee955ef314efd3a71
-
SHA512
acd228df94146d0da02a76c9d13ec0c70d4ce22889db7954e276cf8fc5d37fda18b66e4d3befeeefe2243bd4103c881818394511bab339cb2182df27a9d4f589
-
SSDEEP
768:yZS+qyGNXU86fgBa+JR2kdBQt9GeO9ng:yZSNyGhF8Az2kdBI9Gewg
Malware Config
Signatures
Files
-
ebfc1c7916a27ca3ddb5b7910583c6393caa0d94964d922ee955ef314efd3a71.exe windows x86
bb8c5f962c411c387b1e63777db4f7fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
RtlUnwind
lstrcmpW
GetCPInfoExA
CancelWaitableTimer
CreateSemaphoreA
GetUserDefaultLangID
UnmapViewOfFile
LocalFree
GetComputerNameW
LocalAlloc
AddAtomA
GetPriorityClass
GetStringTypeA
comdlg32
FindTextW
GetSaveFileNameW
msvcrt
iswascii
gdi32
CreateDCW
DeleteDC
StartDocW
CreateDIBitmap
GetViewportOrgEx
WidenPath
user32
MoveWindow
MapDialogRect
SetFocus
DrawStateW
RegisterClassExA
GetMenuStringW
MBToWCSEx
LoadBitmapW
DefDlgProcW
GetMonitorInfoW
GetKBCodePage
InflateRect
CharPrevW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ