Static task
static1
Behavioral task
behavioral1
Sample
efc24e83ba583c4b2e50c95972e45722ccb210b96d3f675d25aa442a0e8aef17.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efc24e83ba583c4b2e50c95972e45722ccb210b96d3f675d25aa442a0e8aef17.exe
Resource
win10v2004-20220812-en
General
-
Target
efc24e83ba583c4b2e50c95972e45722ccb210b96d3f675d25aa442a0e8aef17
-
Size
571KB
-
MD5
81b709e1910e7e8c47f5923ad4db31fb
-
SHA1
eb31e6b84055e753c41541977d340e765fd9eed8
-
SHA256
efc24e83ba583c4b2e50c95972e45722ccb210b96d3f675d25aa442a0e8aef17
-
SHA512
26ab553ee60de1cce8aa1511ec86a7284ee22952ef9efb70d19e89bf2ba56c6776cb23cb49a2bea786a5d0059503f8dfb78c081fce9d6fe00c3bd98ed7e0d39b
-
SSDEEP
12288:t2A0Ppiti32+ttqkpV4boAkwJZGqsg8mMiBIO6gDcELHr:Z0ii3X6kp8kwJZX/7BH6g
Malware Config
Signatures
Files
-
efc24e83ba583c4b2e50c95972e45722ccb210b96d3f675d25aa442a0e8aef17.exe windows x86
17fc2409d45a1d3ef1f7f801f64dab1d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
urlmon
URLDownloadToFileA
comdlg32
GetSaveFileNameA
wsock32
WSACleanup
ntdll
NtQueryInformationProcess
Sections
CODE Size: 541KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE