Static task
static1
Behavioral task
behavioral1
Sample
efdbf8f96922711f52b360038a091b2799899dcba1661cd4d8cbf2b0bd997e6f.exe
Resource
win7-20220812-en
General
-
Target
efdbf8f96922711f52b360038a091b2799899dcba1661cd4d8cbf2b0bd997e6f
-
Size
624KB
-
MD5
48e8d883f301f02d1797d2cdb058e4ee
-
SHA1
5d78a7379a19c264b5ef28c67bb1e9da0cd5f183
-
SHA256
efdbf8f96922711f52b360038a091b2799899dcba1661cd4d8cbf2b0bd997e6f
-
SHA512
18ee2e19458293eed4bde486f21d3db265f116e20d4b6b7549f44dd2ad75fc458618b27a48e5901eaf5925536e67925f4f3b4c8057e5f7cb3019e28b7933b0dc
-
SSDEEP
12288:B7z3NjzQaFRVwlClXiR/Tm5seerFrgkPeMJl0:953RVMClXKzFrjg
Malware Config
Signatures
Files
-
efdbf8f96922711f52b360038a091b2799899dcba1661cd4d8cbf2b0bd997e6f.exe windows x86
5f8a2c726d85c33af0a7c26bfc09e104
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
LCMapStringA
CloseHandle
LoadLibraryA
GetCurrentProcess
user32
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
advapi32
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
Sections
.text Size: 571KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ