Static task
static1
Behavioral task
behavioral1
Sample
8eb701e27ce2931af39e2422485e1ffdd26e9ff0b5c955c638f7a6705225fa7b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8eb701e27ce2931af39e2422485e1ffdd26e9ff0b5c955c638f7a6705225fa7b.exe
Resource
win10v2004-20220812-en
General
-
Target
8eb701e27ce2931af39e2422485e1ffdd26e9ff0b5c955c638f7a6705225fa7b
-
Size
12KB
-
MD5
db046c45cb1dfd4a57b3f47b805679cf
-
SHA1
799acd1fd40b849ddfb792ef6b775bbd23a5567c
-
SHA256
8eb701e27ce2931af39e2422485e1ffdd26e9ff0b5c955c638f7a6705225fa7b
-
SHA512
25630cf61763a75da416b6d0f28cbd4524e7d65a790d5da9af5cba9e9f5c87c51402d6509ed4181793911538f931dc5439d164b64b1161650e4fd042ea2cd1e7
-
SSDEEP
192:Tf7Waomlqj80xgh2ivciOmPqYTSQdeG9usAA9AAtkO9:Gmlqj80xgGzmPq3rhMkO9
Malware Config
Signatures
Files
-
8eb701e27ce2931af39e2422485e1ffdd26e9ff0b5c955c638f7a6705225fa7b.exe windows x86
b8daa6fd5876e6e7fdef5d4f25ca269a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetVersionExA
GetWindowsDirectoryA
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
GetPrivateProfileIntA
SetFilePointer
Sleep
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
GetModuleFileNameA
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
ExitProcess
CreateFileA
CopyFileA
CloseHandle
ReadFile
lstrlenA
wsock32
connect
gethostname
recv
send
socket
closesocket
WSAStartup
advapi32
LookupAccountNameA
IsValidSid
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
GetSidSubAuthority
GetSidSubAuthorityCount
GetUserNameA
GetSidIdentifierAuthority
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoTaskMemFree
rasapi32
RasGetEntryPropertiesA
RasGetEntryDialParamsA
RasEnumEntriesA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE