Static task
static1
Behavioral task
behavioral1
Sample
efac00890c7790c6b349a43c1988d1773b2754b8a056d3e6a54b3b409693bc5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efac00890c7790c6b349a43c1988d1773b2754b8a056d3e6a54b3b409693bc5c.exe
Resource
win10v2004-20220812-en
General
-
Target
efac00890c7790c6b349a43c1988d1773b2754b8a056d3e6a54b3b409693bc5c
-
Size
319KB
-
MD5
b0b78be28f5e406fbdb6663ebe46c264
-
SHA1
5030c25f963e622cef1503e461dcf951b54ead40
-
SHA256
efac00890c7790c6b349a43c1988d1773b2754b8a056d3e6a54b3b409693bc5c
-
SHA512
a6a9df99bbefb4254c0138129ce9487b53537dfb0e43d616cd1974e355d8b19054b28680987d4c298efc7ff71eaf586d959178b6a179fd82b88f10a466ca9f8a
-
SSDEEP
6144:sV7t/LdcSw914/g/J/dHBnbjUrieS+OQ4ASBIHvPhQVg8yW:sdFLWSwT4/g/J/hBbmEBIxGSW
Malware Config
Signatures
Files
-
efac00890c7790c6b349a43c1988d1773b2754b8a056d3e6a54b3b409693bc5c.exe windows x86
d8f77d2333a24ef6096ef4d689d64a6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
DeleteFileA
GetCurrentThread
TlsSetValue
OpenSemaphoreA
PulseEvent
HeapReAlloc
Sleep
VirtualAlloc
GetModuleHandleA
CreateEventA
GetProcAddress
user32
IsZoomed
IsWindowUnicode
gdi32
FloodFill
PatBlt
shell32
DuplicateIcon
netapi32
NetDfsAddFtRoot
psapi
GetModuleInformation
GetProcessMemoryInfo
avifil32
AVIMakeFileFromStreams
msvfw32
DrawDibSetPalette
ICGetInfo
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 547KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ldata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE