CeyEvent@12
Static task
static1
Behavioral task
behavioral1
Sample
6fe252106e0d1bc427cd67675fb273ec802e84901291d52dcbc39bfd82a37d56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6fe252106e0d1bc427cd67675fb273ec802e84901291d52dcbc39bfd82a37d56.exe
Resource
win10v2004-20220812-en
General
-
Target
6fe252106e0d1bc427cd67675fb273ec802e84901291d52dcbc39bfd82a37d56
-
Size
275KB
-
MD5
611b2ef84e3d1a963a6b889cac7cee90
-
SHA1
7b8297ae52871bc1dec767b92899d2277eb22383
-
SHA256
6fe252106e0d1bc427cd67675fb273ec802e84901291d52dcbc39bfd82a37d56
-
SHA512
c8a59a6910bafeaefd7d19700596fa1e4b3af91664319c91230984c3d4da2fe4a310fdbed826194a74ad04b01e06658d418a11fe0f6649fde2d3861b11779e8c
-
SSDEEP
6144:yt8IhVYFEyQlTgALXqo1jmUZxL6xQGQggY:yt8vEPZNLXqs76Pv
Malware Config
Signatures
Files
-
6fe252106e0d1bc427cd67675fb273ec802e84901291d52dcbc39bfd82a37d56.exe windows x86
ea28f662ab831803e9a8c823439760d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_getcwd
_mkdir
_sleep
_stat
_strlwr
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_findclose
_findfirst
_findnext
_fullpath
_iob
_onexit
_setmode
abort
atexit
difftime
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
fseek
fwrite
getenv
localtime
malloc
printf
rand
signal
srand
time
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
kernel32
AddAtomA
CloseHandle
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
ExitProcess
FindAtomA
GetAtomNameA
GetDriveTypeA
GetFileAttributesA
GetLastError
GetLogicalDriveStringsA
GetModuleHandleA
GetProcAddress
LoadLibraryA
Module32First
Process32First
Process32Next
SetFileAttributesA
SetUnhandledExceptionFilter
ntdll
atoi
atol
memcpy
memset
sprintf
strcat
strcpy
strlen
tolower
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
user32
CallNextHookEx
DispatchMessageA
GetKeyNameTextA
GetMessageA
MessageBoxA
SetWindowsHookExA
TranslateMessage
UnhookWindowsHookEx
ws2_32
WSACleanup
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
getaddrinfo
gethostbyname
gethostname
htons
listen
recv
select
send
socket
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE