Static task
static1
Behavioral task
behavioral1
Sample
ef1e97baa9224aa143f3a009b197abee17a4041fa93db7ae0be92fb2baf299bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef1e97baa9224aa143f3a009b197abee17a4041fa93db7ae0be92fb2baf299bc.exe
Resource
win10v2004-20220812-en
General
-
Target
ef1e97baa9224aa143f3a009b197abee17a4041fa93db7ae0be92fb2baf299bc
-
Size
66KB
-
MD5
2dc1ffb563a882cf455b86d77c2a3a90
-
SHA1
21bbfef4702b41452cc5315d3ecbd00b881050e5
-
SHA256
ef1e97baa9224aa143f3a009b197abee17a4041fa93db7ae0be92fb2baf299bc
-
SHA512
3f838ca097b773c3906986336ab8909e267a2d2edb0c55ae34a5ce85869aeb70dbb0924842e3f7862bd7e9c96e4465d1ac4e1756f742c24d6539c60077c6146c
-
SSDEEP
1536:AXrkQqZKaYGJjen+RwOuBcYBphnUbXKuqJxxVfBd:prEncwOuFpRU7KuG1fL
Malware Config
Signatures
Files
-
ef1e97baa9224aa143f3a009b197abee17a4041fa93db7ae0be92fb2baf299bc.exe windows x86
2bd567d82492c554f834b3afae04cf38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
ExitThread
VirtualQuery
QueryPerformanceFrequency
GetCommModemStatus
CreateThread
FindFirstVolumeA
FreeEnvironmentStringsW
SetConsolePalette
TransactNamedPipe
ExpungeConsoleCommandHistoryA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE