Static task
static1
Behavioral task
behavioral1
Sample
e08347dbd4a4a043a361779716043c87bec3e3d3072a8fa829ae3e3084a9add2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e08347dbd4a4a043a361779716043c87bec3e3d3072a8fa829ae3e3084a9add2.exe
Resource
win10v2004-20220812-en
General
-
Target
e08347dbd4a4a043a361779716043c87bec3e3d3072a8fa829ae3e3084a9add2
-
Size
28KB
-
MD5
09d3249a465b51640b0a68fbd74eab0f
-
SHA1
40fe2481da38ea23f21fcd21de69e6e088032706
-
SHA256
e08347dbd4a4a043a361779716043c87bec3e3d3072a8fa829ae3e3084a9add2
-
SHA512
1b17dbecf07b11ceac63ce13776705b0a4ef0e1a8b957d3b8aa326dbb8f7a5654fc6fea047013bbd7069b088ce64b2128d8df18a67a6108c6051643511c6874d
-
SSDEEP
384:nuXerfoIcaY7438rg2+wNmKOywXp56agaL9IfuYP3:nuXeLof374Cg2+W1wXp56aHKXP
Malware Config
Signatures
Files
-
e08347dbd4a4a043a361779716043c87bec3e3d3072a8fa829ae3e3084a9add2.exe windows x86
8b36e96b7d40e1819318343be4f4a78d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteFile
GetVersion
lstrcmpA
CreateFileA
CreateToolhelp32Snapshot
CloseHandle
GetSystemDirectoryA
GetFileSize
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
FindFirstFileA
MoveFileExA
LoadLibraryA
ExitProcess
OpenProcess
Process32First
Process32Next
ReadFile
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WriteConsoleA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
advapi32
RegSetValueExA
RegCreateKeyA
RegCloseKey
imagehlp
CheckSumMappedFile
shell32
ShellExecuteA
user32
CharToOemA
wininet
InternetGetConnectedState
Sections
CODE Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ