Static task
static1
Behavioral task
behavioral1
Sample
e94bd80ba0516c9cf492b3d4a5c4497982e6ac527a589896a3b20f58951e7fd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e94bd80ba0516c9cf492b3d4a5c4497982e6ac527a589896a3b20f58951e7fd1.exe
Resource
win10v2004-20220812-en
General
-
Target
e94bd80ba0516c9cf492b3d4a5c4497982e6ac527a589896a3b20f58951e7fd1
-
Size
28KB
-
MD5
cf3decea3e0d578054cef01b88ba4c7a
-
SHA1
1932ae47cf676574e876e86dcb4e174b059ca4d9
-
SHA256
e94bd80ba0516c9cf492b3d4a5c4497982e6ac527a589896a3b20f58951e7fd1
-
SHA512
b132de75b71ee0d45f45a23d5da8cd4fea05c9fa86a20734d54ef6908abf5d47de13e131194d5765049a58efeb1b56dc740a32bf42d07f92a82d6349048afc03
-
SSDEEP
768:617U0E9B8Eig8PCcI9o8yH86lrao2bJq:mk9ulggCcImb6P1q
Malware Config
Signatures
Files
-
e94bd80ba0516c9cf492b3d4a5c4497982e6ac527a589896a3b20f58951e7fd1.exe windows x86
abd5788ca6afd067fff24736c2e3ac8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetModuleFileNameA
WinExec
CopyFileA
LocalFree
FindClose
FindNextFileA
FileTimeToSystemTime
LocalAlloc
FindFirstFileA
CloseHandle
WaitForSingleObject
CreateThread
Sleep
CreateDirectoryA
GetWindowsDirectoryA
GlobalMemoryStatus
GetVersionExA
GetComputerNameA
TerminateProcess
GetEnvironmentVariableA
ReadFile
PeekNamedPipe
CreateProcessA
GetStartupInfoA
CreatePipe
GetDiskFreeSpaceExA
GetDriveTypeA
GetVolumeInformationA
lstrlenA
GetLogicalDriveStringsA
DeleteFileA
lstrcmpA
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
GetCurrentProcess
GetModuleHandleA
SetPriorityClass
GetCurrentThread
SetThreadPriority
WriteFile
SetProcessPriorityBoost
user32
MessageBoxA
wsprintfA
EndDialog
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHGetFileInfoA
SHChangeNotify
ShellExecuteExA
shlwapi
StrStrIA
netapi32
Netbios
ws2_32
socket
WSAStartup
inet_ntoa
setsockopt
htons
send
recv
closesocket
shutdown
inet_addr
gethostname
gethostbyname
connect
msvcrt
__set_app_type
_except_handler3
_controlfp
_stricmp
_CxxThrowException
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
??1type_info@@UAE@XZ
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
malloc
__CxxFrameHandler
strstr
_snprintf
sscanf
ftell
fwrite
time
_access
atoi
??3@YAXPAX@Z
__p__fmode
sprintf
fread
fclose
fseek
fopen
oleaut32
GetErrorInfo
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE