Static task
static1
Behavioral task
behavioral1
Sample
ef7cdaa11091c52cd4645e2c547f2abf77b8ce282fbae2e57926a62f3e981648.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef7cdaa11091c52cd4645e2c547f2abf77b8ce282fbae2e57926a62f3e981648.exe
Resource
win10v2004-20220812-en
General
-
Target
ef7cdaa11091c52cd4645e2c547f2abf77b8ce282fbae2e57926a62f3e981648
-
Size
95KB
-
MD5
72de6c9667219054d521de750db0b118
-
SHA1
e489f05daf2e5a733e6949c0c144f2feb43f1369
-
SHA256
ef7cdaa11091c52cd4645e2c547f2abf77b8ce282fbae2e57926a62f3e981648
-
SHA512
2bba3eef35ca35e4c504cc2983849e12ec6936c7f09611801337ceb8289b88832825c01da9962444c51b93df06714161337445c8ed456ce8672fc2eb230deddd
-
SSDEEP
1536:83k57K2ZaG7iQZhmrdRvxA/CHSmYyv+knlZ014wWbi4nsshYuqqiZaplFR1yy:UQvZodRpktyvB0WwWbiEYQV1L
Malware Config
Signatures
Files
-
ef7cdaa11091c52cd4645e2c547f2abf77b8ce282fbae2e57926a62f3e981648.exe windows x86
b77d942fe2dc1d9d08cf89c805b98753
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetStdHandle
GetStartupInfoW
GetEnvironmentVariableW
RemoveDirectoryA
ExitProcess
FindClose
SetEvent
GetModuleHandleA
OpenProcess
HeapSize
GetFileAttributesA
GetTickCount
CreateFileA
CloseHandle
SetLastError
GetCommandLineW
WaitForSingleObject
ResetEvent
VirtualAllocEx
DeleteFileW
user32
MessageBoxA
DispatchMessageW
GetWindowLongA
GetClassInfoA
GetDC
GetDC
PeekMessageA
DispatchMessageW
GetDC
FillRect
FindWindowW
GetSysColor
CallWindowProcW
mfcsubs
??$HashKey@PBD@@YGIPBD@Z
??$HashKey@PBD@@YGIPBD@Z
??$HashKey@PBD@@YGIPBD@Z
??$HashKey@PBD@@YGIPBD@Z
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE