Static task
static1
Behavioral task
behavioral1
Sample
e415cb56a157c0b0afef4085569803601d0b710351c48dfc1f5735376b32883a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e415cb56a157c0b0afef4085569803601d0b710351c48dfc1f5735376b32883a.exe
Resource
win10v2004-20220812-en
General
-
Target
e415cb56a157c0b0afef4085569803601d0b710351c48dfc1f5735376b32883a
-
Size
279KB
-
MD5
67be5d4d5a6c4fe78b6cb932fa2eb01f
-
SHA1
6e5101e433e28eee6c98eef0df753fc975f98ff9
-
SHA256
e415cb56a157c0b0afef4085569803601d0b710351c48dfc1f5735376b32883a
-
SHA512
39b7e1faeab4c29f81cb2f4d8ca71f6a4494b90a9173f917c6306d4659de8af5615f5df79ddaf09d709b749c6442b67047a3b6a01ae6e2e72fa4bb7f2fca117f
-
SSDEEP
6144:ScfmJ6MFsljLrFpYKHm+EDyli97FubhGjoNi/U5xqXYtGTk5y2dUDa/9TBNILBkP:SuMFs9cKH+yw9769T0z
Malware Config
Signatures
Files
-
e415cb56a157c0b0afef4085569803601d0b710351c48dfc1f5735376b32883a.exe windows x86
2e50a87b849fb25b059c2cb84e6cbbe4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
socket
inet_addr
recv
send
select
closesocket
getsockname
getpeername
WSACleanup
setsockopt
ioctlsocket
htons
connect
WSAStartup
gethostname
gethostbyname
wininet
InternetCheckConnectionA
kernel32
SizeofResource
CreateProcessA
GlobalUnlock
Module32First
GetProcAddress
LoadLibraryA
GetExitCodeThread
LockResource
GetModuleFileNameA
CreateToolhelp32Snapshot
Module32Next
GetVersionExA
CloseHandle
GetCurrentProcessId
GetSystemDirectoryA
GetCurrentDirectoryA
GetSystemInfo
GetModuleHandleA
GetSystemTime
Process32Next
Process32First
TerminateProcess
lstrcmpiA
GetCurrentProcess
GetLastError
GlobalMemoryStatus
GetComputerNameA
GetCurrentThreadId
lstrcpyA
Sleep
CreateFileA
WritePrivateProfileStringA
WritePrivateProfileSectionA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetTimeZoneInformation
SetFilePointer
SetStdHandle
ReadFile
MultiByteToWideChar
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
TerminateThread
GlobalAlloc
OpenProcess
WaitForSingleObject
GlobalLock
LoadResource
FreeLibrary
FreeResource
GetPrivateProfileIntA
FindResourceA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
GetPrivateProfileStringA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetFileAttributesA
ExitThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileA
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
WriteFile
user32
GetWindowTextA
GetForegroundWindow
FindWindowExA
DispatchMessageA
FindWindowA
TranslateMessage
ReleaseDC
GetDC
GetWindowRect
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
SwitchDesktop
CloseDesktop
GetSystemMetrics
GetMessageA
SetTimer
WaitForInputIdle
wsprintfA
gdi32
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetDIBits
DeleteObject
DeleteDC
SetDIBits
advapi32
RegOpenKeyExA
GetUserNameA
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
OpenProcessToken
GetTokenInformation
CryptEncrypt
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDecrypt
CryptDestroyHash
CryptReleaseContext
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
shell32
ShellExecuteExA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
timeGetTime
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ