Static task
static1
Behavioral task
behavioral1
Sample
e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd.exe
Resource
win10v2004-20220901-en
General
-
Target
e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd
-
Size
194KB
-
MD5
00afdd8933d2197f45560071082c88ed
-
SHA1
3c10cb3f935eff1d823ea82ef2d9f3bdca8d293f
-
SHA256
e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd
-
SHA512
0ed3a23fed09c2a77c5b54ca5179f4cac38bd594793833fb2131d5038a41ed28832db1922283bba532fd10524b64947c1935b5632f186a6c22f88229078796b1
-
SSDEEP
3072:AzX4Fmy4utEZeIS4OrhWbrZ1zVIQoeZVya59w8dFarlwCXgI+RDa367OmJkGPLZf:f4xS4tbrKQoA3ow+2aaOFzb
Malware Config
Signatures
Files
-
e105c23e82b23eff3126ea0fbf0c8850fcd253b0dbfe4283ccc066b23ee638cd.exe windows x86
2def80e33554c9fa7ba605b5986c9ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
bind
WSAStartup
listen
kernel32
CreatePipe
TerminateProcess
VirtualProtect
gdi32
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable
shell32
SHAppBarMessage
StrRChrIA
StrStrIA
Sections
.text Size: 36KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 729KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ