Static task
static1
Behavioral task
behavioral1
Sample
efa9e9b5b50afa9cf59290007a4b404fc4610fdc41edcc61e7e3b0b0c818b8a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efa9e9b5b50afa9cf59290007a4b404fc4610fdc41edcc61e7e3b0b0c818b8a5.exe
Resource
win10v2004-20220901-en
General
-
Target
efa9e9b5b50afa9cf59290007a4b404fc4610fdc41edcc61e7e3b0b0c818b8a5
-
Size
92KB
-
MD5
5927c593bc28e5b49d4b4e405b2606fd
-
SHA1
720db54e7cb8b32b905392bff75b1b30d29bc58b
-
SHA256
efa9e9b5b50afa9cf59290007a4b404fc4610fdc41edcc61e7e3b0b0c818b8a5
-
SHA512
5dbcb3959f5a545f4dbe3adc8c5bc0b5a03d8e8419be2dbc5ab6bc58998b5be930789586b3c17e03f9bf874af4c2a7dfc6c469f0a51a9f7968b3cb13df3115cd
-
SSDEEP
1536:/ZHkOItAKG2SATkKaA+Jfqb7sxeCH0/v5VrsTMLV/rDeDCjVV/V:/Rk1AKMKu27C0/v5STieuR
Malware Config
Signatures
Files
-
efa9e9b5b50afa9cf59290007a4b404fc4610fdc41edcc61e7e3b0b0c818b8a5.exe windows x86
a8dde138d86bc6ee3b62a1c1a759b3ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitializeFlatSB
PropertySheetW
FlatSB_SetScrollRange
ord6
CreatePropertySheetPageW
ord3
UninitializeFlatSB
ord8
ord4
PropertySheetA
FlatSB_EnableScrollBar
CreateToolbarEx
ord2
ord14
CreatePropertySheetPageA
FlatSB_GetScrollProp
shlwapi
StrCmpNA
StrRStrIW
StrToIntA
kernel32
GetStringTypeA
IsBadWritePtr
HeapFree
VirtualUnlock
LocalReAlloc
GetACP
OpenEventA
HeapCompact
SetLocaleInfoA
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
GetVersion
SetHandleInformation
TlsSetValue
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
LocalHandle
GetHandleInformation
OpenMutexA
LocalLock
VirtualAllocEx
ResumeThread
GetModuleFileNameA
GetStdHandle
FreeEnvironmentStringsA
GetStartupInfoA
GetCommandLineA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
DeleteCriticalSection
GetLastError
SetFilePointer
ReadFile
FlushFileBuffers
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
CloseHandle
CreateFileA
InterlockedDecrement
InterlockedIncrement
SetStdHandle
MultiByteToWideChar
GetCPInfo
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
SetEndOfFile
GetStringTypeW
LCMapStringA
LCMapStringW
uxtheme
GetThemeSysFont
cryptui
CryptUIDlgViewContext
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIWizExport
comdlg32
GetSaveFileNameW
PageSetupDlgW
GetOpenFileNameA
GetFileTitleA
GetFileTitleW
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ