Static task
static1
Behavioral task
behavioral1
Sample
e3409493c778bda97d3f59e7c4958646c48c2a944c41a4309498e812203aff21.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3409493c778bda97d3f59e7c4958646c48c2a944c41a4309498e812203aff21.exe
Resource
win10v2004-20220812-en
General
-
Target
e3409493c778bda97d3f59e7c4958646c48c2a944c41a4309498e812203aff21
-
Size
96KB
-
MD5
a33d0386dccf156d0c107439f7181d40
-
SHA1
e8cb2ea9a29fcbb183286dbbf57b519c44cb60ad
-
SHA256
e3409493c778bda97d3f59e7c4958646c48c2a944c41a4309498e812203aff21
-
SHA512
976f73f0dcc7d4c614feb11e579cf7711a5fb409b428cd26bc2c4b458f31ce6fd324331c776da4fcae35d88358ede78e9c6979c6e7b0cbc99cd1481431ea5dda
-
SSDEEP
1536:S0Uhw03KskReEh8YrN/8oYVxT2J4xF7UZddasB5ASc9Oz86Pizl2B7dSBmc:SAsrYrN0oYVdZMZdZBrc9OHaQZdSf
Malware Config
Signatures
Files
-
e3409493c778bda97d3f59e7c4958646c48c2a944c41a4309498e812203aff21.exe windows x86
eebb306476ce3dd842ec53c486470adc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFileTime
GetFileTime
FlushFileBuffers
SystemTimeToFileTime
GetLocalTime
GetSystemTime
SetLastError
GetLastError
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
SetEndOfFile
Sleep
SetFileAttributesA
GetModuleFileNameA
GetTempPathA
GetShortPathNameA
FreeLibrary
GetTickCount
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetVersionExA
GetCurrentProcess
WaitForSingleObject
CreateRemoteThread
OpenProcess
GetSystemDirectoryA
CreateFileA
SetFilePointer
ReadFile
WriteFile
CloseHandle
CreateProcessA
GetStartupInfoA
advapi32
OpenServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
QueryServiceStatus
OpenSCManagerA
CloseServiceHandle
msvcrt
rename
strrchr
??2@YAPAXI@Z
wcslen
__dllonexit
_onexit
_exit
_XcptFilter
_snwprintf
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sprintf
malloc
free
exit
srand
rand
_strnicmp
_wcsnicmp
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE