Static task
static1
Behavioral task
behavioral1
Sample
e08f95b04fab7310fc1270f786e9f8b00f28f043c3d08d784e307e5e97e1ca5a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e08f95b04fab7310fc1270f786e9f8b00f28f043c3d08d784e307e5e97e1ca5a.exe
Resource
win10v2004-20221111-en
General
-
Target
e08f95b04fab7310fc1270f786e9f8b00f28f043c3d08d784e307e5e97e1ca5a
-
Size
68KB
-
MD5
2fa0b0ffbe939e75fce12ff24fbd74bb
-
SHA1
1888d19f79fe2d232f202dfc3d6fb65fe74b984e
-
SHA256
e08f95b04fab7310fc1270f786e9f8b00f28f043c3d08d784e307e5e97e1ca5a
-
SHA512
d91545adafd9ddee2833624fc4c06eae041c8a236a3ed6f72c130f740c44d9d978e436cbc1014a662d97b9a70dfe4b8060029a0e7aeb6840b30b6a5b6524725a
-
SSDEEP
768:sgeeVAqcG5sPy8W7KbwVRd6nUIdXUZZG+6Jlhyf/2EeXYzhZYdxK2/sUk:sccGmGVd6UIdu6JGf//eXeZujsUk
Malware Config
Signatures
Files
-
e08f95b04fab7310fc1270f786e9f8b00f28f043c3d08d784e307e5e97e1ca5a.exe windows x86
d1c1e1cfebca0554ae38d9debd695855
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHRegSetUSValueA
ws2_32
inet_addr
iphlpapi
GetAdaptersInfo
SendARP
kernel32
IsBadWritePtr
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
Sleep
WaitForSingleObject
CloseHandle
CreateProcessA
DeleteFileA
GetLongPathNameA
GetTempPathA
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
HeapFree
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetStringTypeW
GetLastError
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE