Static task
static1
Behavioral task
behavioral1
Sample
e71e20b7f3c26d5f94eee80f92d68b90b2d2409f3988a9e0428b539522a445f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e71e20b7f3c26d5f94eee80f92d68b90b2d2409f3988a9e0428b539522a445f8.exe
Resource
win10v2004-20220901-en
General
-
Target
e71e20b7f3c26d5f94eee80f92d68b90b2d2409f3988a9e0428b539522a445f8
-
Size
29KB
-
MD5
82b9a4b3ee4c678e9c7c9eeafa3fed56
-
SHA1
13e51f5c11ca40ac94fadabe70325b66244d5482
-
SHA256
e71e20b7f3c26d5f94eee80f92d68b90b2d2409f3988a9e0428b539522a445f8
-
SHA512
bf05d42675f0a209757306cdd254a1e848c87f95871ceb473f2ffd351f898fe2680c8aacfb500be292c298272666f4d777c52f4baa40e2a67d2a42e536bf2083
-
SSDEEP
384:BihdgSVRtoE2grJf7j4IKaWWXxkBTJqqLNbFnqFA5BHdq1BzNJ/1N:BMc4Vj4cbxkBTJqqvqi5BuJfr
Malware Config
Signatures
Files
-
e71e20b7f3c26d5f94eee80f92d68b90b2d2409f3988a9e0428b539522a445f8.exe windows x86
6fdf18d9a19c02ea18dda5cc74b0dd91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetModuleFileNameA
GetLocalTime
InitializeCriticalSection
CreateProcessA
GetSystemDirectoryA
Sleep
SetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
GetComputerNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetLogicalDriveStringsA
GetFullPathNameA
FindFirstFileA
FindNextFileA
FindClose
EnterCriticalSection
ExitProcess
LeaveCriticalSection
user32
GetWindowTextA
GetForegroundWindow
GetMessageA
SetTimer
MessageBoxA
CharLowerBuffA
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
GetUserNameA
RegDeleteValueA
msvcrt
sprintf
fclose
ftell
fwrite
fread
fopen
memcpy
strlen
strcat
rand
srand
time
__CxxFrameHandler
strncmp
strcpy
memset
printf
fputs
strcmp
sscanf
fseek
strncpy
strstr
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
msvcp60
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE