Static task
static1
Behavioral task
behavioral1
Sample
efe21ff6b86c0d41bf091c142f4f91f143ee057cf2963374ed5335b6d30b7cd0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
efe21ff6b86c0d41bf091c142f4f91f143ee057cf2963374ed5335b6d30b7cd0.exe
Resource
win10v2004-20221111-en
General
-
Target
efe21ff6b86c0d41bf091c142f4f91f143ee057cf2963374ed5335b6d30b7cd0
-
Size
11KB
-
MD5
de86d4a2b2a4844a41c060a59444c6d2
-
SHA1
8a5b9c0a2b3bebd2f62c765307eabc3fb0ed1ddd
-
SHA256
efe21ff6b86c0d41bf091c142f4f91f143ee057cf2963374ed5335b6d30b7cd0
-
SHA512
e561de2aef669588a01f3535817eff456919fc3fbcc3434668964f53288f108fd109a7eb4ea236d4ad46005f3457e26db771d88b9ab05b72e280bfd1a565d5b5
-
SSDEEP
192:l6OV7c6lWfuVg+LZH4DBZZ2nIc4t4Dp4rtwXpsZSK8:lNV79Vg+H4NZZ2nN5yrtwXpR
Malware Config
Signatures
Files
-
efe21ff6b86c0d41bf091c142f4f91f143ee057cf2963374ed5335b6d30b7cd0.exe windows x86
0d9544e4cfcc4ec56b928417b3e27c16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
UnregisterHotKey
UnhookWindowsHookEx
TranslateMessage
ShowWindow
SetWindowsHookExA
SetWindowPos
SetWindowLongA
SetTimer
SetRect
SetForegroundWindow
SendMessageA
RegisterHotKey
RegisterClassExA
PostQuitMessage
LoadIconA
KillTimer
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetSysColor
GetMessageA
GetForegroundWindow
GetDlgItemTextA
GetClientRect
GetClassNameA
FillRect
EnumWindows
EndPaint
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallNextHookEx
BeginPaint
kernel32
lstrlenW
lstrlenA
lstrcpyW
lstrcpyA
lstrcmpA
lstrcatW
lstrcatA
WideCharToMultiByte
Sleep
SetFileTime
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetFileTime
GetEnvironmentVariableA
GetCurrentThreadId
GetCommandLineA
ExitProcess
CreateThread
CreateFileW
CopyFileA
CloseHandle
comctl32
InitCommonControls
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
gdi32
CreateSolidBrush
SelectObject
SetBkMode
SetTextColor
CreateFontIndirectA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ