Static task
static1
Behavioral task
behavioral1
Sample
e2ec2b0e7afa1dcfa9fbf2fec7904d392c34e4383c1413104577639fda86c205.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2ec2b0e7afa1dcfa9fbf2fec7904d392c34e4383c1413104577639fda86c205.exe
Resource
win10v2004-20221111-en
General
-
Target
e2ec2b0e7afa1dcfa9fbf2fec7904d392c34e4383c1413104577639fda86c205
-
Size
160KB
-
MD5
c25004f3066477a6461fad7a3887de96
-
SHA1
05cd83d7629209c64bf70a800802d3b964df6420
-
SHA256
e2ec2b0e7afa1dcfa9fbf2fec7904d392c34e4383c1413104577639fda86c205
-
SHA512
949c630fe481db47d4fd656c73f72851fe6980d7327f0c9c2835491d24f73ad024b005a3be239b8812ae7a1f8a577346540422c63365677d22283be9cfc20019
-
SSDEEP
3072:hG3qjKVF278lEs6bSFiM/SAgZHUtzIyRSDdfDU/UBQWKx:tjCF27tsHd/lay4Ddl6We
Malware Config
Signatures
Files
-
e2ec2b0e7afa1dcfa9fbf2fec7904d392c34e4383c1413104577639fda86c205.exe windows x86
2db154921a21de6fedc945921f5cb24a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
WSACleanup
inet_addr
gethostbyaddr
kernel32
WriteFile
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
Sleep
MultiByteToWideChar
GetProcAddress
GetModuleHandleW
CreateProcessW
CreateMutexW
LockResource
LoadResource
SizeofResource
FindResourceW
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetSystemInfo
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ