Static task
static1
Behavioral task
behavioral1
Sample
e119e62dd560109d333f648d7538a10b5eeaf0c1ab467f5d0ee1236e33925767.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e119e62dd560109d333f648d7538a10b5eeaf0c1ab467f5d0ee1236e33925767.exe
Resource
win10v2004-20220812-en
General
-
Target
e119e62dd560109d333f648d7538a10b5eeaf0c1ab467f5d0ee1236e33925767
-
Size
368KB
-
MD5
1777ba615b944336ef70632f4ab37e70
-
SHA1
2eb0952446ec0f46b35df9733c01de0280a240fe
-
SHA256
e119e62dd560109d333f648d7538a10b5eeaf0c1ab467f5d0ee1236e33925767
-
SHA512
aa153d6cc915bfc6206d9a67a72a9695d1fb1e49e5920480f0c978de49509a38f678ad610dfb7a8ac68e0483f0502a0752e2995a9533b0881e9fe238bb8adf30
-
SSDEEP
6144:OiIircCjF/LjjMsC6B2CK7Ld3Ht6TBbgbZogffS06UMwWTX+Li7AGH1N:OiIhkniU2/7LVHkBbYdfWTXf7AGHP
Malware Config
Signatures
Files
-
e119e62dd560109d333f648d7538a10b5eeaf0c1ab467f5d0ee1236e33925767.exe windows x86
ae5c3b3c99d128ee3bbd25e93fa4a169
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohl
recvfrom
sendto
inet_addr
inet_ntoa
WSAEventSelect
accept
shutdown
htons
recv
bind
connect
listen
ntohs
gethostbyname
select
htonl
WSAGetLastError
closesocket
send
setsockopt
WSAStartup
socket
ioctlsocket
iphlpapi
GetAdaptersInfo
imagehlp
MapFileAndCheckSumW
drreport
CreateDrReport
kernel32
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
IsValidCodePage
GetOEMCP
CreateFileA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
VirtualFree
LoadLibraryA
GetCurrentDirectoryA
GetACP
GetDriveTypeA
GetSystemDefaultLangID
SetCurrentDirectoryW
ExitProcess
GetModuleFileNameW
CreateMutexW
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileSectionNamesA
GetLastError
WaitForSingleObject
GetTickCount
Sleep
GetSystemTime
CopyFileW
SetEvent
CreateFileMappingW
CloseHandle
CreateThread
CreateEventW
MultiByteToWideChar
InterlockedDecrement
WideCharToMultiByte
DeleteCriticalSection
GetCurrentProcess
QueryPerformanceCounter
SetFileAttributesW
LeaveCriticalSection
GetFileAttributesW
EnterCriticalSection
CreateFileW
InitializeCriticalSection
GetFileSize
WaitForMultipleObjects
GetExitCodeThread
TerminateThread
FindNextFileW
FindClose
FindFirstFileW
GetLocalTime
ReadFile
SetFilePointer
WriteFile
RemoveDirectoryW
SystemTimeToFileTime
CreateDirectoryW
GetTempFileNameW
DeleteFileW
GetTempPathW
SearchPathW
HeapDestroy
SetEndOfFile
GetFileTime
CreateProcessW
GetCurrentDirectoryW
GetPrivateProfileStringA
SetFileTime
TerminateProcess
ResetEvent
LocalFileTimeToFileTime
FileTimeToSystemTime
GetModuleFileNameA
GetStdHandle
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualAlloc
HeapReAlloc
ReleaseMutex
GetFullPathNameW
HeapCreate
RaiseException
GetStartupInfoA
GetVersionExA
GetCommandLineA
GetFileAttributesA
GetDriveTypeW
FileTimeToLocalFileTime
InterlockedExchange
InterlockedIncrement
HeapFree
GetProcessHeap
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileA
HeapAlloc
GetTimeZoneInformation
user32
LoadCursorW
wsprintfW
GetMessageW
RegisterClassW
DefWindowProcW
PostQuitMessage
DispatchMessageW
CreateWindowExW
MessageBoxW
TranslateMessage
GetSysColorBrush
PostMessageW
ShowWindow
Sections
.text Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE