Static task
static1
Behavioral task
behavioral1
Sample
e95389e4aa91c52d81190fb20850dcfd2923f18c9fc9501bdbe417fbf43331e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e95389e4aa91c52d81190fb20850dcfd2923f18c9fc9501bdbe417fbf43331e1.exe
Resource
win10v2004-20220812-en
General
-
Target
e95389e4aa91c52d81190fb20850dcfd2923f18c9fc9501bdbe417fbf43331e1
-
Size
40KB
-
MD5
8f3620d4782d75ec10794278de9d1ab1
-
SHA1
1010f45d73d6e040c1c529856919edbea97a0044
-
SHA256
e95389e4aa91c52d81190fb20850dcfd2923f18c9fc9501bdbe417fbf43331e1
-
SHA512
4ab10419cc685fc01f2cb16234924329b516ce9fc9687c3cf51170274681bc702c6d7c84bf6f905e536dbaf83a9ce6ad7bafb57af9f56d1ccd2a5a037c132420
-
SSDEEP
768:uqxkccMGeAKYvwl5oT+i8shT/3RXDP1CqTtXGidji8PCXPKpjt5vk8auwt+:ueEMGEYvwlsPhz3JZoiVB+P8kBuwt+
Malware Config
Signatures
Files
-
e95389e4aa91c52d81190fb20850dcfd2923f18c9fc9501bdbe417fbf43331e1.exe windows x86
0cc5c9f8b5976eb2f2eca618ec9e93a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
CloseHandle
SizeofResource
LoadResource
FindResourceA
GetTempFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
WideCharToMultiByte
InterlockedDecrement
CreateThread
CreateMutexA
ReadProcessMemory
GetThreadContext
CreateProcessA
lstrcatA
GetSystemDirectoryA
TerminateProcess
GetFileAttributesA
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
lstrcmpiA
CopyFileA
ReleaseMutex
HeapFree
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
WinExec
GetStartupInfoA
LocalFree
Sleep
LoadLibraryA
GetProcAddress
lstrlenA
FreeLibrary
lstrcpyA
GetWindowsDirectoryA
GetTempPathA
GetModuleFileNameA
WriteFile
DeleteFileA
GetLastError
CreateFileA
user32
SendMessageA
GetWindowTextA
PostMessageA
GetWindow
FindWindowExA
FindWindowA
GetForegroundWindow
wsprintfA
advapi32
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegEnumKeyExA
ole32
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
GetErrorInfo
SysFreeString
VariantClear
wininet
InternetWriteFile
HttpEndRequestA
HttpOpenRequestA
InternetCloseHandle
HttpAddRequestHeadersA
InternetAttemptConnect
InternetConnectA
InternetOpenA
HttpSendRequestA
InternetSetCookieA
HttpSendRequestExA
InternetReadFile
netapi32
Netbios
msvcp60
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
msvcrt
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
free
wcslen
atol
_CxxThrowException
strchr
strncat
??2@YAPAXI@Z
atof
_ftol
rand
puts
strncmp
strrchr
_XcptFilter
_strnicmp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
atoi
strncpy
strcspn
strstr
__CxxFrameHandler
_except_handler3
printf
sprintf
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE