Static task
static1
Behavioral task
behavioral1
Sample
8ee7ea21047a42a8088913239c709e9fc7aeedfc693aaf5eddef62a3ff0d3571.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ee7ea21047a42a8088913239c709e9fc7aeedfc693aaf5eddef62a3ff0d3571.exe
Resource
win10v2004-20220812-en
General
-
Target
8ee7ea21047a42a8088913239c709e9fc7aeedfc693aaf5eddef62a3ff0d3571
-
Size
84KB
-
MD5
6e4adbacc8e54f55383a170201ff56f0
-
SHA1
e86d9541f369e032c22f13039978ea32137ba9a2
-
SHA256
8ee7ea21047a42a8088913239c709e9fc7aeedfc693aaf5eddef62a3ff0d3571
-
SHA512
f951458d824974b317be6adc9db4057c0c3916184bec446173661c141b15a0713d299d18b3f71e6216b8c3cf9482e153a1acefcbe1942d32a67a8e243de59f84
-
SSDEEP
1536:pjhkihl67AY51ysyvIt9wXXpodlQrfy4Eqb:piEy5tSIt9wXX2QrK
Malware Config
Signatures
Files
-
8ee7ea21047a42a8088913239c709e9fc7aeedfc693aaf5eddef62a3ff0d3571.exe windows x86
e7a37afc02f861f77934083f908c155e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
ExitProcess
GetLastError
CreateMutexA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
CloseHandle
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
lstrlenA
CopyFileA
GetSystemDirectoryA
SetStdHandle
LCMapStringW
InterlockedExchange
CreateThread
GetVersionExA
GetSystemDefaultUILanguage
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
ExitThread
Sleep
OutputDebugStringA
lstrcatA
GetTickCount
LCMapStringA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
SetFilePointer
WriteFile
TerminateProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
user32
wsprintfA
advapi32
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
RegSetValueExA
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
ws2_32
__WSAFDIsSet
recv
sendto
setsockopt
send
select
socket
htons
connect
closesocket
gethostbyname
WSAStartup
inet_addr
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ