Static task
static1
Behavioral task
behavioral1
Sample
e20a89fd16136ec200c3ff2746f61eda3dd479bd95f1fdaddb013cc6e4fb23e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e20a89fd16136ec200c3ff2746f61eda3dd479bd95f1fdaddb013cc6e4fb23e4.exe
Resource
win10v2004-20220812-en
General
-
Target
e20a89fd16136ec200c3ff2746f61eda3dd479bd95f1fdaddb013cc6e4fb23e4
-
Size
315KB
-
MD5
06578840c4ccdd54bcbbebf804109006
-
SHA1
81a81c7318e6639b1cbede7f80035e582e4d47c7
-
SHA256
e20a89fd16136ec200c3ff2746f61eda3dd479bd95f1fdaddb013cc6e4fb23e4
-
SHA512
a3c44467099b8940100623ca2485e1aae49c88aee8d18d0f4417656c55e93d903ff09e8ee24c17e441ccf039af39abd2c73b6f296e208d93266efe35ab69928e
-
SSDEEP
6144:CiEYw3dkG8hlZ2bEmfED1VpFZ3WYjc7ZQkV+4HT/lgoydR95pt:R3yCGklZ2bEzD1PsLTlgoydR9l
Malware Config
Signatures
Files
-
e20a89fd16136ec200c3ff2746f61eda3dd479bd95f1fdaddb013cc6e4fb23e4.exe windows x86
c6898ab877063d15da3dfec542f0f578
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
floor
ceil
_CIasin
strcmp
strcpy
sprintf
strncpy
strlen
strstr
memcpy
localtime
mktime
kernel32
GetModuleHandleA
HeapCreate
CreateThread
HeapDestroy
ExitProcess
GetCommandLineA
GetCurrentProcess
WideCharToMultiByte
HeapFree
Sleep
GetLocalTime
HeapReAlloc
HeapAlloc
CreateFileA
ReadFile
CloseHandle
wsock32
WSAGetLastError
closesocket
WSACleanup
WSAStartup
recv
send
htons
sendto
winmm
timeBeginPeriod
timeEndPeriod
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ