Static task
static1
Behavioral task
behavioral1
Sample
e5a55e1a50e923af14b7aca91633b66676fe5a689496bc36b8a0b258cec5dbc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5a55e1a50e923af14b7aca91633b66676fe5a689496bc36b8a0b258cec5dbc3.exe
Resource
win10v2004-20220812-en
General
-
Target
e5a55e1a50e923af14b7aca91633b66676fe5a689496bc36b8a0b258cec5dbc3
-
Size
967KB
-
MD5
e96ba9991704a888f184e3d3b5c79f6d
-
SHA1
1a1d3d160efa9b0dc54c5363759e754ae7943d50
-
SHA256
e5a55e1a50e923af14b7aca91633b66676fe5a689496bc36b8a0b258cec5dbc3
-
SHA512
d646530045898d1f9240162d29cb7f1f8c9ab5a1e055902108238d8702dbbdf2300171109b4682ebc36adc4925851d73a1782cdd52c17650def8f5e819204858
-
SSDEEP
24576:qbQmGll6xQeBUPz4Ucv9nzy14+QbvccgPMgbQp:sQbBeHUizy14Zbo+
Malware Config
Signatures
Files
-
e5a55e1a50e923af14b7aca91633b66676fe5a689496bc36b8a0b258cec5dbc3.exe windows x86
6059ca33c6fdf202ea172496a6175b88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
getpeername
WSAStartup
getsockopt
closesocket
gethostname
getaddrinfo
freeaddrinfo
ioctlsocket
listen
accept
recvfrom
sendto
send
select
__WSAFDIsSet
WSACleanup
WSAIoctl
connect
WSAGetLastError
htons
ntohs
getsockname
setsockopt
recv
bind
socket
WSASetLastError
wldap32
ord26
ord41
ord127
ord118
ord133
ord142
ord46
ord301
ord27
ord147
ord167
ord208
ord145
ord14
ord216
ord79
kernel32
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetFullPathNameW
GetTimeZoneInformation
RtlUnwind
LoadLibraryExW
ExitThread
GetFileAttributesW
lstrcpynW
CreateDirectoryW
GetTickCount
GetModuleHandleW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetCommandLineW
InitializeCriticalSectionAndSpinCount
RaiseException
GetLastError
DecodePointer
DeleteCriticalSection
VerSetConditionMask
SleepEx
VerifyVersionInfoW
InitializeCriticalSection
LeaveCriticalSection
SetLastError
EnterCriticalSection
Sleep
PeekNamedPipe
FreeLibrary
LoadLibraryW
ReadFile
GetStdHandle
GetProcAddress
WaitForMultipleObjects
FormatMessageA
WaitForSingleObject
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
MoveFileExW
CreateFileW
GetFileSize
SetEndOfFile
SetFilePointer
SetFileTime
WriteFile
GetFileInformationByHandle
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetTempPathW
GetCurrentProcessId
GetCurrentThreadId
FindClose
FindFirstFileW
GetModuleHandleA
VirtualAlloc
VirtualFree
CreateProcessW
GetModuleFileNameW
GetCurrentProcess
QueryDosDeviceW
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
TerminateProcess
Process32NextW
IsDebuggerPresent
OutputDebugStringW
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
GetModuleHandleExW
AreFileApisANSI
IsValidCodePage
GetACP
GetOEMCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
WriteConsoleW
SetEnvironmentVariableA
GetFileType
GetTempFileNameW
SetFilePointerEx
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStringTypeW
EncodePointer
user32
CharUpperW
advapi32
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
SHFileOperationW
oleaut32
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
shlwapi
PathIsDirectoryW
PathAddBackslashW
PathFileExistsW
Sections
.text Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ