Static task
static1
Behavioral task
behavioral1
Sample
e7efdc08e368c56a00f69d2adbb85929b19a56c35f2a1a69ba80ee65b04fd00c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e7efdc08e368c56a00f69d2adbb85929b19a56c35f2a1a69ba80ee65b04fd00c.exe
Resource
win10v2004-20220901-en
General
-
Target
e7efdc08e368c56a00f69d2adbb85929b19a56c35f2a1a69ba80ee65b04fd00c
-
Size
572KB
-
MD5
f503e75140d5a791dedba62ed1cfad33
-
SHA1
4793bd42401279d007db22b2331127764e5a8551
-
SHA256
e7efdc08e368c56a00f69d2adbb85929b19a56c35f2a1a69ba80ee65b04fd00c
-
SHA512
f9da40d47226548909bf710920cd9e481d3b696681b665f07117edd3e3cd21534174a8b48cea96f2f622ba0ee0eb862ff0ad3ca6f3dc64577bb4364e1c045413
-
SSDEEP
12288:EFQx3UFgl+oImNouhB4BPqjB3TU6TCsKEkrxE2ubGGyEn:r+i+oIZ+B4Bid3TU6adBOyEn
Malware Config
Signatures
Files
-
e7efdc08e368c56a00f69d2adbb85929b19a56c35f2a1a69ba80ee65b04fd00c.exe windows x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 496KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE