Static task
static1
Behavioral task
behavioral1
Sample
e12e7d539f714b897ac1593de14bf2c843a9001a8d32429d3596dfba9f0ac783.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e12e7d539f714b897ac1593de14bf2c843a9001a8d32429d3596dfba9f0ac783.exe
Resource
win10v2004-20220901-en
General
-
Target
e12e7d539f714b897ac1593de14bf2c843a9001a8d32429d3596dfba9f0ac783
-
Size
133KB
-
MD5
4c577083154aa8c8f62165d1f44946d0
-
SHA1
cbe75b64b648e42bf969336a902cbeea806c1652
-
SHA256
e12e7d539f714b897ac1593de14bf2c843a9001a8d32429d3596dfba9f0ac783
-
SHA512
51583b143d04415202809ec9cfc51d14230cb44ed9d260e09e56ade6824b5df1592583050c6d53fda0bdc6c428a38b595745830968fbe508490dba93a1d6484b
-
SSDEEP
3072:gAr5706iUzub1d+wtZ4nVsejEQzxLQ33nHDnDlH/igZJ1HkHp76:gk57Q8A+w74VsejEsi33n3tquJqt
Malware Config
Signatures
Files
-
e12e7d539f714b897ac1593de14bf2c843a9001a8d32429d3596dfba9f0ac783.exe windows x86
7e16d312f1374d6c85a686c47b5bd3b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
listen
user32
DispatchMessageA
dnsapi
DnsFlushResolverCache
shlwapi
PathFileExistsA
shell32
SHGetSpecialFolderPathA
mpr
WNetGetUserA
wininet
InternetSetCookieA
msvcrt
srand
advapi32
RegCreateKeyExA
ole32
CoInitialize
oleaut32
SafeArrayUnaccessData
Sections
.text Size: 125KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE