Static task
static1
Behavioral task
behavioral1
Sample
e6e3a5b7bac1e3ddb8fb0f8b54e5ebfc94ee79fd03fb5e2c8c2035ac89695a63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6e3a5b7bac1e3ddb8fb0f8b54e5ebfc94ee79fd03fb5e2c8c2035ac89695a63.exe
Resource
win10v2004-20220901-en
General
-
Target
e6e3a5b7bac1e3ddb8fb0f8b54e5ebfc94ee79fd03fb5e2c8c2035ac89695a63
-
Size
9KB
-
MD5
41e25b389d2e233c3460f4d18678fd2b
-
SHA1
31038693e69d0e1f56b0fd2627669b6bb5f4a929
-
SHA256
e6e3a5b7bac1e3ddb8fb0f8b54e5ebfc94ee79fd03fb5e2c8c2035ac89695a63
-
SHA512
b71cd8f0e80057c49d77f311bd7e6438f869910274bbbcb24d553b6b8e4cda9243acd03b0b0411d24dd7690e6c241b2782cf81f44a98fef3f02f2bad2d00201a
-
SSDEEP
96:qO7i/RDM6s9AGIzrtaMF05lROzmEnXDUomygrqCkYK+JwEwVVqTSMBoY5OJrwsqN:qsi/BM6QAPrsVROF0qCkc/wSSeKfqB7
Malware Config
Signatures
Files
-
e6e3a5b7bac1e3ddb8fb0f8b54e5ebfc94ee79fd03fb5e2c8c2035ac89695a63.exe windows x86
aa40f0ee5b9946a9515f2b777acdda65
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
GetAcceptExSockaddrs
rexec
shutdown
dn_expand
__WSAFDIsSet
WSASetLastError
WSACleanup
WSAAsyncGetServByPort
htonl
msvcrt
?unexpected@@YAXXZ
_Gettnames
__dllonexit
__unDName
??_U@YAPAXI@Z
_CItanh
__doserrno
__p__osver
_adj_fdiv_m32i
user32
AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint
wininet
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
FtpDeleteFileA
ForceNexusLookupExW
GopherCreateLocatorA
HttpAddRequestHeadersA
IncrementUrlCacheHeaderData
InternetAutodial
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE