Static task
static1
Behavioral task
behavioral1
Sample
ef747d4e25fba856ade59960661df627dcb5eeb3d5656d74e95c2a4dfe872b4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef747d4e25fba856ade59960661df627dcb5eeb3d5656d74e95c2a4dfe872b4a.exe
Resource
win10v2004-20220812-en
General
-
Target
ef747d4e25fba856ade59960661df627dcb5eeb3d5656d74e95c2a4dfe872b4a
-
Size
68KB
-
MD5
6adcb5a43cbccaf1a4b8c590b19f7bbe
-
SHA1
0fefb892ac9a85f4b54686c0a6a147cdccb443e9
-
SHA256
ef747d4e25fba856ade59960661df627dcb5eeb3d5656d74e95c2a4dfe872b4a
-
SHA512
83e23af5f9ae86d2665860dee49f8b3ab08bb5c433d156025f1706f8b35f522936b20c5c50c6e14153fb2617e90ebd146632ca1dc00ce3f3027088b73644bb27
-
SSDEEP
1536:u6VEbdl3BCmO6hc5aojHKiyKfTI6tfCHa1BDU74b2IN:uegfBCzPjHPfTPa61mdIN
Malware Config
Signatures
Files
-
ef747d4e25fba856ade59960661df627dcb5eeb3d5656d74e95c2a4dfe872b4a.exe windows x86
0c48944adbdcdd559947ae3745de0c7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
lstrcpynW
lstrcmpW
WriteFile
GetDateFormatW
GetTimeFormatW
lstrcpynW
TerminateProcess
lstrcmpW
lstrcpynW
TerminateProcess
GetLastError
GetLocalTime
lstrcmpW
GetFileSize
lstrcpynW
lstrcpynW
GetCommandLineW
GetModuleHandleA
OpenFile
GetDateFormatW
OpenFile
TerminateProcess
GetModuleHandleA
TerminateProcess
GetLocalTime
lstrcpynW
GetStartupInfoA
GetModuleHandleA
lstrcpynW
lstrcpynW
GetCommandLineW
lstrcmpW
Sections
.text Size: 61KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
srmu Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ