Static task
static1
Behavioral task
behavioral1
Sample
ef66e17572a5a9dffb262fd9c934bfde975437327d77f2a2b261b703767b9362.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef66e17572a5a9dffb262fd9c934bfde975437327d77f2a2b261b703767b9362.exe
Resource
win10v2004-20220812-en
General
-
Target
ef66e17572a5a9dffb262fd9c934bfde975437327d77f2a2b261b703767b9362
-
Size
755KB
-
MD5
53617dae7e4f0d32f5576fd384d7d837
-
SHA1
322ab22d90e825ec5bb65aaa4fa32c19b5f7bb0f
-
SHA256
ef66e17572a5a9dffb262fd9c934bfde975437327d77f2a2b261b703767b9362
-
SHA512
a23cf967bcf603facde00ecfb114fec5d5f030c3f746156202f850a8bde992a25d338dc96c06ae25038a62316364b8b40dc789dd21f3256ffc7fcf85bae565e7
-
SSDEEP
12288:s7R1FRARRMzewI1TlFPUTGGXXAr0en6f3apn/HPOQDrvXeyeEAbH6BCmxo7/5Hl5:6bFRADMnIvqTNXwr0e6fgPPOQ/OnqCms
Malware Config
Signatures
Files
-
ef66e17572a5a9dffb262fd9c934bfde975437327d77f2a2b261b703767b9362.exe windows x86
8c6611470ba3268b1ca8f7928a885442
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
kernel32
GetModuleHandleA
GetCommandLineA
GetTickCount
GetVersion
GetLastError
ExitProcess
HeapAlloc
GetProcessHeap
GetFullPathNameA
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
CreateProcessA
GlobalLock
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
SetStdHandle
LoadLibraryExW
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
SizeofResource
ExpandEnvironmentStringsA
FindNextFileA
CreateFileMappingA
CompareStringA
GetDiskFreeSpaceA
FindFirstFileA
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
GetCurrentThreadId
LCMapStringW
GetStartupInfoA
DeleteFileA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
SetEndOfFile
VirtualQuery
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
CreateThread
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
InterlockedExchange
GetVersionExA
GetCurrentThread
GetModuleFileNameW
TlsGetValue
GetSystemTime
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
GetTempPathA
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCurrentProcessId
GetModuleHandleW
IsDebuggerPresent
user32
GetSysColor
GetFocus
MessageBoxA
MessageBeep
EndDialog
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ClientToScreen
CreateWindowExA
GetSubMenu
SetWindowLongA
SetCapture
GetWindowRect
KillTimer
BeginPaint
GetMessageA
SetFocus
EndPaint
DispatchMessageA
SetTimer
GetWindowLongA
EnableMenuItem
SetForegroundWindow
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
DefWindowProcA
UpdateWindow
GetParent
DestroyWindow
ScreenToClient
SendMessageA
DrawTextA
GetDC
IsWindow
SetWindowPos
ReleaseDC
PostQuitMessage
PostMessageA
SystemParametersInfoA
IsWindowVisible
InvalidateRect
wsprintfA
GetClientRect
CallWindowProcA
SetCursor
gdi32
CreateSolidBrush
SelectObject
SetTextColor
GetDeviceCaps
BitBlt
DeleteObject
msvcrt
free
_exit
exit
_controlfp
Sections
.text Size: 730KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ