Static task
static1
Behavioral task
behavioral1
Sample
eff8194f6d6be48393d5c318a80a7ecb274c9986abc21656af602a79c2d0bb81.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eff8194f6d6be48393d5c318a80a7ecb274c9986abc21656af602a79c2d0bb81.exe
Resource
win10v2004-20221111-en
General
-
Target
eff8194f6d6be48393d5c318a80a7ecb274c9986abc21656af602a79c2d0bb81
-
Size
195KB
-
MD5
104a069636e981effe6c2f6fb2cea057
-
SHA1
b353fdddec4efeba05e4962a5505a970b5f7baa9
-
SHA256
eff8194f6d6be48393d5c318a80a7ecb274c9986abc21656af602a79c2d0bb81
-
SHA512
d2ab9d9ef507c997d6bb597b5f19c46b11fac4ceec01a7a7c300c0d233c3609e4faffbd000ccb6914a08a134db8c3765b401829deb99c7b5c1d22701498ec973
-
SSDEEP
6144:KrhyrrsFsPZpoSZcurlbq3pBZUYsLulOa0:KWsFWgJDZUYs6lU
Malware Config
Signatures
Files
-
eff8194f6d6be48393d5c318a80a7ecb274c9986abc21656af602a79c2d0bb81.exe windows x86
1225bcd09cae08819aac71d6fad2254d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
ole32
StringFromIID
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
VirtualQueryEx
IsDebuggerPresent
LocalAlloc
RaiseException
WideCharToMultiByte
GetLocaleInfoA
GetCurrentProcess
SetUnhandledExceptionFilter
GetEnvironmentVariableA
MultiByteToWideChar
GetACP
GetModuleHandleA
UnhandledExceptionFilter
EnumResourceNamesW
GetCPInfoExA
lstrlenW
lstrlenA
InterlockedExchange
CreateProcessA
GetSystemTimeAsFileTime
ExitProcess
GetThreadLocale
advapi32
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ