Static task
static1
Behavioral task
behavioral1
Sample
efc493834d7ca924c4a2f4a3addd3bff3a3123837ecbc6551aa720b1fc51607e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efc493834d7ca924c4a2f4a3addd3bff3a3123837ecbc6551aa720b1fc51607e.exe
Resource
win10v2004-20220812-en
General
-
Target
efc493834d7ca924c4a2f4a3addd3bff3a3123837ecbc6551aa720b1fc51607e
-
Size
264KB
-
MD5
1403101aa4745498e220bdda59634843
-
SHA1
688604235e1e4cb3d205d6178a40e514908351c1
-
SHA256
efc493834d7ca924c4a2f4a3addd3bff3a3123837ecbc6551aa720b1fc51607e
-
SHA512
4bd5892fce2b8a2104fe1725811beca382f491209d17e7aa7a56e9fc7dc908287a4c6fd20a08d479d39aa7af9d37bbd07b0413263f46b374996016cd169316ca
-
SSDEEP
6144:I2Ls8d7wiXbqSNsjDIvABKV/S1ym0KJYdsj5UUbw4S6V72TJBi6Uvq:Iwdd9tcDDKaAt4CKyUvq
Malware Config
Signatures
Files
-
efc493834d7ca924c4a2f4a3addd3bff3a3123837ecbc6551aa720b1fc51607e.exe windows x86
f2b74ecabbeb75697f7ff67684b22b88
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess
user32
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
advapi32
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
Sections
.text Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ