Static task
static1
Behavioral task
behavioral1
Sample
e36b81bcf9c505cb2d2d5f84669ccdab655bc518a52781baccf6491a4824bc4a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e36b81bcf9c505cb2d2d5f84669ccdab655bc518a52781baccf6491a4824bc4a.exe
Resource
win10v2004-20220901-en
General
-
Target
e36b81bcf9c505cb2d2d5f84669ccdab655bc518a52781baccf6491a4824bc4a
-
Size
244KB
-
MD5
7b9c978276705159140c2b190d0a4450
-
SHA1
1eecbec08c687cd097fe62a29c4d96380fb1d25f
-
SHA256
e36b81bcf9c505cb2d2d5f84669ccdab655bc518a52781baccf6491a4824bc4a
-
SHA512
e84a67f56e79938bf054264b930f20b1fa049074612662734633a4a27d60a995026cae3e2f5ddc121ded5f314d979468702f0505df3f6009f719ecd096de34af
-
SSDEEP
6144:aE0EvRpKjSdMfcxyP3OMV/Pv2lmw5K8uhZB:N0QEGMfEyP9VP2L88uF
Malware Config
Signatures
Files
-
e36b81bcf9c505cb2d2d5f84669ccdab655bc518a52781baccf6491a4824bc4a.exe windows x86
1f8550f7775744b33eafa567d99019bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetSpecialFolderPathA
user32
wsprintfA
DispatchMessageA
FindWindowA
SendMessageA
TranslateMessage
GetMessageA
ole32
CoCreateGuid
iphlpapi
GetIpAddrTable
SendARP
msvcp60
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
ws2_32
socket
ioctlsocket
setsockopt
connect
select
shutdown
inet_addr
ntohl
gethostname
gethostbyname
htonl
inet_ntoa
WSAStartup
WSACleanup
htons
recv
accept
listen
bind
send
closesocket
msvcrt
sscanf
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncmp
malloc
free
_access
memmove
??2@YAPAXI@Z
__CxxFrameHandler
time
srand
sprintf
printf
_beginthreadex
urlmon
URLDownloadToFileA
kernel32
InitializeCriticalSection
GetTickCount
InterlockedIncrement
LeaveCriticalSection
SetFilePointer
GetLocalTime
EnterCriticalSection
GetStartupInfoA
InterlockedDecrement
GlobalFree
GetModuleFileNameA
GetTempPathA
CreateDirectoryA
Sleep
CloseHandle
GetProcAddress
LoadLibraryA
ResumeThread
GetWindowsDirectoryA
FreeLibrary
GetFileSize
CreateFileA
WriteFile
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GlobalUnlock
GetCurrentProcessId
GlobalLock
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
ReadFile
GlobalAlloc
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ