Static task
static1
Behavioral task
behavioral1
Sample
ef363b591f8ac626b2a1fa1f9e963d55d0bda9ab768dca415ee273274c5d37de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef363b591f8ac626b2a1fa1f9e963d55d0bda9ab768dca415ee273274c5d37de.exe
Resource
win10v2004-20221111-en
General
-
Target
ef363b591f8ac626b2a1fa1f9e963d55d0bda9ab768dca415ee273274c5d37de
-
Size
276KB
-
MD5
f86962adcc528b75c2395b46656b5334
-
SHA1
36d03a0bb8830872f3a31aee789524090964a419
-
SHA256
ef363b591f8ac626b2a1fa1f9e963d55d0bda9ab768dca415ee273274c5d37de
-
SHA512
5b5cb74dc4ed5698211f07c061725755aae69771852f901ec455c0284815fdbddc876dd4dba7ef3ee80cbe681200bafd603fbd0b614a4448d92340bcdfca5184
-
SSDEEP
3072:0QOq8z2kC836wCDdOFLfv5dzpHf/mlEl0GzWTo+WsXlKpqaPBWz7vvZM9dh69GuV:iVJRjpHPSt3YsXZM9bmxT
Malware Config
Signatures
Files
-
ef363b591f8ac626b2a1fa1f9e963d55d0bda9ab768dca415ee273274c5d37de.exe windows x86
01d4b3ee624691139239dac837d75179
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFileOperationA
SHGetDesktopFolder
gdi32
GetClipBox
CopyEnhMetaFileA
GetDIBits
GetDCOrgEx
SelectPalette
SelectObject
BitBlt
CreateCompatibleDC
user32
GetCursor
RegisterClassA
GetKeyNameTextA
CharLowerBuffA
GetDlgItem
MessageBoxA
GetDC
GetForegroundWindow
TranslateMessage
GetClassInfoA
IsWindowVisible
IsRectEmpty
WindowFromPoint
RemovePropA
DestroyCursor
GetClientRect
IsWindow
DrawEdge
BeginPaint
SetClipboardData
GetMenuItemID
IsWindowUnicode
SystemParametersInfoA
GetSysColor
comctl32
ImageList_Remove
ImageList_DragShowNolock
ImageList_DrawEx
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
GetDateFormatA
GetLastError
GetVersionExA
GetThreadLocale
lstrlenA
FreeLibrary
GetProcAddress
VirtualAlloc
VirtualAllocEx
EnumCalendarInfoA
ExitThread
GetFileType
lstrcatA
MoveFileExA
GlobalAlloc
GetCommandLineA
GetModuleHandleA
WaitForSingleObject
lstrcmpA
oleaut32
SafeArrayPtrOfIndex
SysFreeString
SafeArrayGetUBound
SafeArrayCreate
SafeArrayGetElement
SysAllocStringLen
SysReAllocStringLen
GetErrorInfo
ole32
GetHGlobalFromStream
CoCreateFreeThreadedMarshaler
CoGetMalloc
CreateBindCtx
WriteClassStm
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ