CeyEvent@12
Static task
static1
Behavioral task
behavioral1
Sample
eef336425ec990a798ea694dc2f5590195edc3f360046fa23cfd62663b3ebb4e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eef336425ec990a798ea694dc2f5590195edc3f360046fa23cfd62663b3ebb4e.exe
Resource
win10v2004-20220812-en
General
-
Target
eef336425ec990a798ea694dc2f5590195edc3f360046fa23cfd62663b3ebb4e
-
Size
392KB
-
MD5
51d8233383c4f3da02361ef625c09a42
-
SHA1
aa112dae8bb3233367fa7fa4c0c4fdf2236dc290
-
SHA256
eef336425ec990a798ea694dc2f5590195edc3f360046fa23cfd62663b3ebb4e
-
SHA512
b957eb31b2ca46ec87eb1f3f61772c8e6bab921f96a357c94666847da16e4c2e408db7fc19875d827bcdbe601538fd1173842eb10093a439a8565cc353df9e64
-
SSDEEP
12288:Et8vVED3Bk0Mr9Vif7/F1hIIaYHuvAIS26:Et+gvMpVij/F1hV5HuvAIs
Malware Config
Signatures
Files
-
eef336425ec990a798ea694dc2f5590195edc3f360046fa23cfd62663b3ebb4e.exe windows x86
ea28f662ab831803e9a8c823439760d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_getcwd
_mkdir
_sleep
_stat
_strlwr
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_findclose
_findfirst
_findnext
_fullpath
_iob
_onexit
_setmode
abort
atexit
difftime
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
fseek
fwrite
getenv
localtime
malloc
printf
rand
signal
srand
time
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
kernel32
AddAtomA
CloseHandle
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
ExitProcess
FindAtomA
GetAtomNameA
GetDriveTypeA
GetFileAttributesA
GetLastError
GetLogicalDriveStringsA
GetModuleHandleA
GetProcAddress
LoadLibraryA
Module32First
Process32First
Process32Next
SetFileAttributesA
SetUnhandledExceptionFilter
ntdll
atoi
atol
memcpy
memset
sprintf
strcat
strcpy
strlen
tolower
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
user32
CallNextHookEx
DispatchMessageA
GetKeyNameTextA
GetMessageA
MessageBoxA
SetWindowsHookExA
TranslateMessage
UnhookWindowsHookEx
ws2_32
WSACleanup
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
getaddrinfo
gethostbyname
gethostname
htons
listen
recv
select
send
socket
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ