Static task
static1
Behavioral task
behavioral1
Sample
efedfb2a7dd49e8e12d80b54952f8507511ccd1affe0de2a1dd3883472461104.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efedfb2a7dd49e8e12d80b54952f8507511ccd1affe0de2a1dd3883472461104.exe
Resource
win10v2004-20220812-en
General
-
Target
efedfb2a7dd49e8e12d80b54952f8507511ccd1affe0de2a1dd3883472461104
-
Size
15KB
-
MD5
81abe5f69a427560caecd82af5f29e6c
-
SHA1
71b0136b3b795b5765fa6430a8a3740ae1828678
-
SHA256
efedfb2a7dd49e8e12d80b54952f8507511ccd1affe0de2a1dd3883472461104
-
SHA512
3a31ab1c0442a333b7a89a62d8ce0cec3baccb553aeace4a0c2929df1a35ebeedd058b829f228eb8b38f136fd80a50755b280b1b24d2c73caabbe7fce66f607a
-
SSDEEP
192:H15b39YDdypVbLfQbBONa9ayimaZibyWx5iogzquRU327lg:HV+aTQNea9ayimK/s5iogG7m7lg
Malware Config
Signatures
Files
-
efedfb2a7dd49e8e12d80b54952f8507511ccd1affe0de2a1dd3883472461104.exe windows x86
f7c745e5e3a10f6fcd5af25fa46b4f58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetLastError
LocalFree
GetVersion
GetStartupInfoA
GetModuleHandleA
FormatMessageA
user32
LoadIconA
WaitMessage
SetFocus
DestroyWindow
IsDlgButtonChecked
CreateDialogParamA
PostMessageA
GetDlgItemTextA
SetClassLongA
GetWindowTextLengthA
GetDlgItem
DialogBoxParamA
SetDlgItemTextA
DispatchMessageA
TranslateMessage
EnableWindow
IsDialogMessageA
CheckDlgButton
SendDlgItemMessageA
PeekMessageA
MessageBoxA
EndDialog
crtdll
__GetMainArgs
_amsg_exit
_acmdln_dll
exit
memcpy
strstr
_snprintf
memset
advapi32
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegConnectRegistryA
RegSetValueExA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ