Static task
static1
Behavioral task
behavioral1
Sample
e9ef0af566baace8cdeafb197242a6061b50ed2941cfe8bedaafc28a3107261d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9ef0af566baace8cdeafb197242a6061b50ed2941cfe8bedaafc28a3107261d.exe
Resource
win10v2004-20220901-en
General
-
Target
e9ef0af566baace8cdeafb197242a6061b50ed2941cfe8bedaafc28a3107261d
-
Size
513KB
-
MD5
cc299a400e28203da54aefd1bc993eca
-
SHA1
9233c20655de904b29b9595208d0aaafddafa51f
-
SHA256
e9ef0af566baace8cdeafb197242a6061b50ed2941cfe8bedaafc28a3107261d
-
SHA512
d3d863d82a5a396e8038c6c1f78865e449e099f158fb260d9d7975726455b3def8204c441c30ad76a48101ea9c15a7e057c95f57d2d8618f368cad554faf5399
-
SSDEEP
12288:WPwUXX/TJ6ApAwQTGSDv8ANSO2AXt4qYA3GrCVunDppVESLlVluzhD:+wcXN6ApoTXDqa
Malware Config
Signatures
Files
-
e9ef0af566baace8cdeafb197242a6061b50ed2941cfe8bedaafc28a3107261d.exe windows x86
f716147780d246423e31e284eb62a871
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
adbwinapi
AdbCloseHandle
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetInterfaceName
AdbGetSerialNumber
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbReadEndpointSync
AdbWriteEndpointSync
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte
msvcrt
_close
_fstat
_lseek
_open
_read
_strdup
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_chsize
_errno
_iob
_isctype
_lseeki64
_onexit
_pctype
_setjmp
_setmode
_vsnprintf
_wopen
abort
atexit
calloc
exit
fprintf
fputc
free
fwrite
getenv
localeconv
longjmp
malloc
memchr
memcpy
memset
perror
printf
signal
sprintf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strtoul
tmpfile
vfprintf
vsprintf
wcslen
wcstombs
ws2_32
htonl
ntohl
ntohs
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/35 Size: 125KB - Virtual size: 125KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/47 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/61 Size: 25KB - Virtual size: 24KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/73 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/86 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/97 Size: 89KB - Virtual size: 89KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/108 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ