Static task
static1
Behavioral task
behavioral1
Sample
ee7d7e1ee8ac375b12e9f52eca0d25ec46fd139744ab5f3b0be55d30ef0bac1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee7d7e1ee8ac375b12e9f52eca0d25ec46fd139744ab5f3b0be55d30ef0bac1d.exe
Resource
win10v2004-20220812-en
General
-
Target
ee7d7e1ee8ac375b12e9f52eca0d25ec46fd139744ab5f3b0be55d30ef0bac1d
-
Size
500KB
-
MD5
907f7bd01156f989663c950c40787b94
-
SHA1
81fe57ca7deec3cfbe63767f8085ab263369f766
-
SHA256
ee7d7e1ee8ac375b12e9f52eca0d25ec46fd139744ab5f3b0be55d30ef0bac1d
-
SHA512
543c9503d59569e6639f2a19ed19405f246c4bb66b0904b4b39ec6d8f3052792514eb099cd4df6ec6260cb6b0f7c60c26c269919d7e67ad18813cd23889cfed1
-
SSDEEP
12288:PF9cWg3tByFjOW84gkBPQJrp3/alWJtbZU8JFtrymB:bz1OW84BBoFp3ylKtb/JFwE
Malware Config
Signatures
Files
-
ee7d7e1ee8ac375b12e9f52eca0d25ec46fd139744ab5f3b0be55d30ef0bac1d.exe windows x86
2045c518107c98d678984eba7543706c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
lstrlenA
lstrcmpiA
VirtualFree
VirtualAlloc
GetSystemInfo
CloseHandle
SetFilePointer
ReadFile
GetFileSize
GetLastError
CreateFileA
WriteFile
GetFileAttributesA
FindClose
FindFirstFileA
InterlockedIncrement
InterlockedDecrement
LocalFree
FormatMessageA
GetProcAddress
GetModuleHandleA
SetLastError
SetFileAttributesA
GetVersion
Sleep
DeleteFileA
CreateDirectoryA
WaitForMultipleObjects
FreeLibrary
LoadLibraryA
LocalAlloc
WaitForSingleObject
SetEndOfFile
GetCurrentProcess
HeapFree
HeapAlloc
GetTempPathA
GetLocalTime
GetEnvironmentVariableA
GetCurrentProcessId
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateEventA
SetEvent
ResetEvent
ReleaseMutex
CreateMutexA
OpenEventA
GetTempFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
TerminateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
GetSystemTime
LCMapStringW
LCMapStringA
HeapReAlloc
ExitProcess
SetEnvironmentVariableA
GetLocaleInfoW
SetStdHandle
IsBadCodePtr
GetStartupInfoA
IsBadReadPtr
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapCreate
HeapDestroy
RaiseException
RtlUnwind
InterlockedExchange
FlushFileBuffers
SetUnhandledExceptionFilter
HeapSize
TerminateProcess
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
CompareStringW
CompareStringA
GetCPInfo
user32
TranslateMessage
DispatchMessageA
SetThreadDesktop
MsgWaitForMultipleObjects
CreateDesktopA
PostMessageA
IsWindow
CloseDesktop
PeekMessageA
ole32
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoInitialize
CLSIDFromProgID
CLSIDFromString
OleRun
StringFromGUID2
CoCreateGuid
CoUninitialize
oleaut32
SysStringLen
SysAllocStringLen
SysFreeString
wininet
InternetGetConnectedState
InternetCrackUrlA
InternetSetStatusCallback
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetReadFile
HttpQueryInfoA
InternetCanonicalizeUrlA
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TE0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE