Static task
static1
Behavioral task
behavioral1
Sample
efd583b3a0f334359bdbd26197d9773ddcaccbb518730652c7b79bfeb1ad4627.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
efd583b3a0f334359bdbd26197d9773ddcaccbb518730652c7b79bfeb1ad4627.exe
Resource
win10v2004-20220812-en
General
-
Target
efd583b3a0f334359bdbd26197d9773ddcaccbb518730652c7b79bfeb1ad4627
-
Size
308KB
-
MD5
6a20c05ddf1fb332812820abb84054b4
-
SHA1
ed87d58f3718a3dc2b283c59f30cbab3fabb6737
-
SHA256
efd583b3a0f334359bdbd26197d9773ddcaccbb518730652c7b79bfeb1ad4627
-
SHA512
0417a0b67ef4388f2299fcfb93613c23ed093dc34a9a1407a90faf501ee5e5d31fb7faee0bd7f20f4976099d95f68ba2e1fc161ee1632ccac35d9b3906ed9567
-
SSDEEP
6144:9lc9J/F30uyd6QWpX79+y1q+aN9t8pl9EMTpoiA001ggwNyeioSuuYA35B:9lc9J/aZWpX79BpaN9ofEMd2VmQBoSuk
Malware Config
Signatures
Files
-
efd583b3a0f334359bdbd26197d9773ddcaccbb518730652c7b79bfeb1ad4627.exe windows x86
c2f6f83f92fa54d9e84f748850928c4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemAlloc
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
Sections
CODE Size: 288KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE