Static task
static1
Behavioral task
behavioral1
Sample
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe
Resource
win10v2004-20220812-en
General
-
Target
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04
-
Size
236KB
-
MD5
e0f7c81e7892dede334e98f545f4e9b2
-
SHA1
6a8a5b4c5d11ecb8881189742f921c984e98d990
-
SHA256
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04
-
SHA512
fabac9deb7b90f246dd93c56a0da6eebbde84b6334bff1abc028779bc1cf44cb3f551416ff13f8affe0ad9334adde82adfe4fd11a21e077dc820a5ac7a0dbdd3
-
SSDEEP
3072:lDCRHaYBpu/3QTqqjeEO8Wj1cVx4U1oCrKVIklPh5QcU3KQz:5C1u/AGqqROvFqqWIsPA
Malware Config
Signatures
Files
-
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe windows x86
6a80d4073304c34d4f6101bb0999883e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
MessageBeep
Sections
ASPack Size: 158KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ASPack Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ