Static task
static1
Behavioral task
behavioral1
Sample
0e91477f9eb1e7de4514eccaed575b4f396f65182a79c7bd3c0da4fb16c5a66b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e91477f9eb1e7de4514eccaed575b4f396f65182a79c7bd3c0da4fb16c5a66b.exe
Resource
win10v2004-20221111-en
General
-
Target
0e91477f9eb1e7de4514eccaed575b4f396f65182a79c7bd3c0da4fb16c5a66b
-
Size
25KB
-
MD5
3861e1efaf4e75056b4111540874dab0
-
SHA1
00d6988b7f75351b96bc8bc52079d5080c2af325
-
SHA256
0e91477f9eb1e7de4514eccaed575b4f396f65182a79c7bd3c0da4fb16c5a66b
-
SHA512
9e1210140ea750a6a894744bd9de25b1cac4ddc15369698dc0637a975f579e565b3faccc4db39df96e799033e548e054fd2c87f1cd0f3130ba4e051a30e2606c
-
SSDEEP
384:doZ+bzKh6GqjvZrBhGIikRFtzEWG5WbABOYrcdxRhSFdpDZiThmGjPw0lPr0qf:O8jvZrBtTcGABO5fR+DZiThFj1lPRf
Malware Config
Signatures
Files
-
0e91477f9eb1e7de4514eccaed575b4f396f65182a79c7bd3c0da4fb16c5a66b.exe windows x86
25e09f76c981e032707551c8be2bef82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
MessageBoxA
kernel32
CopyFileA
CreateFileA
CreateProcessA
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FreeLibrary
GetFileSize
GetModuleFileNameA
CloseHandle
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
LoadLibraryA
Process32First
Process32Next
ResumeThread
RtlMoveMemory
RtlZeroMemory
Sleep
GetModuleHandleA
VirtualFree
VirtualProtect
WriteFile
lstrcmpA
lstrlenA
UnmapViewOfFile
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shlwapi
PathRemoveFileSpecA
shell32
ShellExecuteA
wsock32
WSACleanup
WSAStartup
closesocket
connect
htons
inet_addr
recv
send
socket
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE