Static task
static1
Behavioral task
behavioral1
Sample
5eeaa1715d214e61b1a6b8823d756bececbcea4d461ce2ef9c4d46141602ee9e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5eeaa1715d214e61b1a6b8823d756bececbcea4d461ce2ef9c4d46141602ee9e.exe
Resource
win10v2004-20221111-en
General
-
Target
5eeaa1715d214e61b1a6b8823d756bececbcea4d461ce2ef9c4d46141602ee9e
-
Size
648KB
-
MD5
3633d21417b41ba6793c5e787ccdb0ca
-
SHA1
c7ed7eca853a0f2d4b35107d6bcf60e122d5c4b3
-
SHA256
5eeaa1715d214e61b1a6b8823d756bececbcea4d461ce2ef9c4d46141602ee9e
-
SHA512
efdd1415026d840fc5cbd97c417f8a398218c38740de4d0914915aafba4ae553431bda18184b3da6b382334c047436d83250cbdc9f35d2230ebe0b5c983a5c7a
-
SSDEEP
12288:ByedSuGMtrN0D3vYw8qAuEiZvNUHe4Jay7jd:B1Sv+rNqZ8viZvf4Jay7p
Malware Config
Signatures
Files
-
5eeaa1715d214e61b1a6b8823d756bececbcea4d461ce2ef9c4d46141602ee9e.exe windows x86
b3100dde6e7a95ab4600e37e8f1fea24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowLongA
ValidateRect
ShowScrollBar
ole32
IIDFromString
CoGetObject
CLSIDFromString
OleCreateMenuDescriptor
ws2_32
WSAIsBlocking
WSAResetEvent
WSASetServiceW
select
getservbyname
WSALookupServiceBeginA
WSACleanup
kernel32
GetBinaryTypeA
VirtualLock
GlobalUnlock
SetCommTimeouts
GetUserDefaultLangID
CreateMutexA
WritePrivateProfileStringA
SetVolumeLabelA
lstrcatW
GetDateFormatA
GetTapeStatus
GetConsoleMode
DeleteCriticalSection
EnumSystemCodePagesW
OpenFile
CompareStringA
OutputDebugStringW
ExitProcess
CreateFileW
IsProcessorFeaturePresent
WriteConsoleOutputW
GetDriveTypeA
lstrcmpiA
GlobalFlags
GetCurrentProcessId
SizeofResource
lstrcpyA
GlobalAddAtomA
QueryDosDeviceW
EnumCalendarInfoA
SetThreadPriorityBoost
GetFullPathNameA
LoadLibraryExA
GetSystemTime
EnumSystemCodePagesA
SetEndOfFile
SetProcessAffinityMask
SwitchToFiber
CreatePipe
FindNextChangeNotification
GetSystemTimeAsFileTime
ConnectNamedPipe
TlsGetValue
GetEnvironmentStringsW
VirtualAlloc
ReleaseSemaphore
GetTickCount
SetEnvironmentVariableW
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ