Static task
static1
Behavioral task
behavioral1
Sample
ef39f7de0b2a1865660d3f314925eeacd9fb32d0316da3456c25531472f3f635.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef39f7de0b2a1865660d3f314925eeacd9fb32d0316da3456c25531472f3f635.exe
Resource
win10v2004-20221111-en
General
-
Target
ef39f7de0b2a1865660d3f314925eeacd9fb32d0316da3456c25531472f3f635
-
Size
352KB
-
MD5
227bf46112e66596ecdafe7b5c29c4a7
-
SHA1
cae043303c3db298886252fb47aadda8bb337a84
-
SHA256
ef39f7de0b2a1865660d3f314925eeacd9fb32d0316da3456c25531472f3f635
-
SHA512
0e21337896126fe8193d58a17dc45c08d1ce1a0d4ff924fe811f755904ec82af7cf81fca1772d6194bbdfabb114a5bc0fc45611a23d1c59e654cdf378ffd2bea
-
SSDEEP
6144:gEHmuKVLZ/bdddjS6c+1qnvkkEc5uzuk1H2Fl9c3iCTXFAvL8Grd58sc9HcaVJE7:gEYVLhs+1Os+501E7f6uwwT6EV8OD
Malware Config
Signatures
Files
-
ef39f7de0b2a1865660d3f314925eeacd9fb32d0316da3456c25531472f3f635.exe windows x86
9baddc03dddfc5207ca1bd8bfc0121c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
lstrlenA
GetModuleHandleA
FindClose
CreateMutexA
CloseHandle
CreateEventA
GlobalLock
GetACP
GetLastError
GetStdHandle
CancelIo
GlobalUnlock
LocalFree
VirtualProtectEx
GetConsoleTitleW
LoadLibraryExW
GetSystemTime
OpenMutexA
IsBadReadPtr
user32
GetKeyState
ClipCursor
IsIconic
GetSubMenu
CreateWindowExA
GetParent
IsMenu
GetMessageA
DialogBoxParamA
EndDialog
GetDlgItemTextA
LoadCursorA
GetMessageA
MessageBoxA
clbcatq
CheckMemoryGates
SetupSave
ComPlusMigrate
GetComputerObject
GetCatalogObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ