Static task
static1
Behavioral task
behavioral1
Sample
e2028282358a50ad40f839d2764bd73f694c3ca37a1434472d3a349f16f0e5bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2028282358a50ad40f839d2764bd73f694c3ca37a1434472d3a349f16f0e5bd.exe
Resource
win10v2004-20220812-en
General
-
Target
e2028282358a50ad40f839d2764bd73f694c3ca37a1434472d3a349f16f0e5bd
-
Size
13KB
-
MD5
6a06d335ec2e224617d0e8de82402451
-
SHA1
6b67d2dd3d4bdbb54a37a324d6728ff944306e63
-
SHA256
e2028282358a50ad40f839d2764bd73f694c3ca37a1434472d3a349f16f0e5bd
-
SHA512
fe99355a1634dd55252ee4c5e46aac8cc7561c8fb7f3404ef33bf0624d58071557683bfd1a19e851633be3bc570db1781906b5670d24f159261571e66801c8eb
-
SSDEEP
192:YaHBGouYzGGjXkREkHPXLoqXEGzVklkGYkml22:n06kHPbFEGzVIkGYk82
Malware Config
Signatures
Files
-
e2028282358a50ad40f839d2764bd73f694c3ca37a1434472d3a349f16f0e5bd.exe windows x86
ac51102dc560aae2a4cac5683599223f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
GetUserNameA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
AddAtomA
CopyFileA
CreateMutexA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
asctime
atexit
fclose
fflush
fopen
fprintf
free
localtime
malloc
memset
signal
strcat
strcmp
strlen
strncpy
time
user32
CallNextHookEx
DispatchMessageA
GetForegroundWindow
GetKeyState
GetMessageA
GetWindowTextA
SetWindowsHookExA
TranslateMessage
wininet
FtpPutFileA
InternetCloseHandle
InternetConnectA
InternetOpenA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE