Static task
static1
Behavioral task
behavioral1
Sample
c8d3ea8a7b3cd872d177ba4980ba1b96a1e570776809a72d81bd5ccf415c695e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c8d3ea8a7b3cd872d177ba4980ba1b96a1e570776809a72d81bd5ccf415c695e.exe
Resource
win10v2004-20220901-en
General
-
Target
c8d3ea8a7b3cd872d177ba4980ba1b96a1e570776809a72d81bd5ccf415c695e
-
Size
198KB
-
MD5
69e18d41d1a30a7f875a3a3f50fa77f0
-
SHA1
bd6faa0fa232deb8d85b9d91ab079267d6cd5580
-
SHA256
c8d3ea8a7b3cd872d177ba4980ba1b96a1e570776809a72d81bd5ccf415c695e
-
SHA512
dcc65f9e74418a5814d64ac51ca3b9571f733224894d47e7ec8bcd6b38e086fc56cf95b3b60b111a7fc57509bbc19e4d22be063e8a2c5c19d9118da60255cdc0
-
SSDEEP
6144:4L1W354vHFsLWC5fTvhYAqysFnflJhSU:4PlsL2lhNfRSU
Malware Config
Signatures
Files
-
c8d3ea8a7b3cd872d177ba4980ba1b96a1e570776809a72d81bd5ccf415c695e.exe windows x86
8579d94e0de113ba4d91a2db7f15be9c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernelee
GetVersionExA
GetLocalTime
FindClose
FindNextFileA
GetMProceHandleW
FindFirstFileA
EnumResourceLanguagesA
GlobalAlloc
WaitForSingleObject
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
GetTickCount
GetTempPathA
ResetEvitt
WaitForSingleObject
shellee
ord201
ShellExecuteW
advapiee
RegQueryValueExA
RegOpitKeyExA
ElfBackupEvittLogFileA
RegSetValueExW
RegCreateKeyExA
RegOpitKeyExW
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
.data Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA