Static task
static1
Behavioral task
behavioral1
Sample
ce0fd099800083ac22816cdf8571ad898c7a652cc10ceb4a20591ad18b5b020a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ce0fd099800083ac22816cdf8571ad898c7a652cc10ceb4a20591ad18b5b020a.exe
Resource
win10v2004-20220901-en
General
-
Target
ce0fd099800083ac22816cdf8571ad898c7a652cc10ceb4a20591ad18b5b020a
-
Size
11KB
-
MD5
495c9018299561abcb9b8bd388ee5af3
-
SHA1
5536dbb0253687d4f10ee6a3c8838a9c8afbaf6c
-
SHA256
ce0fd099800083ac22816cdf8571ad898c7a652cc10ceb4a20591ad18b5b020a
-
SHA512
e97f361e0638f47a829635955b40c8fc0e4ef816951bc54404686b607b5df8f51553555dd6d722db1bcf6841552978d7ac4293f9338b7559fdd47643311a6475
-
SSDEEP
192:BPFiACOYFP38tdpQc8vXFP1uHLx6y/Z8BnH1t9rU8dIxd1M:7iAC9CpQc8furx6yx8Bn39rU8A0
Malware Config
Signatures
Files
-
ce0fd099800083ac22816cdf8571ad898c7a652cc10ceb4a20591ad18b5b020a.exe windows x86
ddb274a18895e9d9a406cdce01d42a1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
bbbbbb
memset
memmove
sprintf
memcpy
strncpy
strlen
aaaaaaaa
GetModuleHandleA
HeapCreate
GetTempPathA
GetModuleFileNameA
Sleep
CreateMutexA
GetLastError
CloseHandle
ExitProcess
CopyFileA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
HeapDestroy
GetTempFileNameA
CreateFileA
WriteFile
FindFirstFileA
FindClose
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CreateThread
HeapAlloc
HeapFree
HeapReAlloc
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
wsock32
htons
inet_addr
socket
connect
send
recv
gethostbyname
closesocket
WSACleanup
WSAStartup
shell32
ShellExecuteA
Sections
xxxxxxxx Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
fsdddddd Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
afdaaaaa Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sdaddddd Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adssssss Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dssssss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ