Static task
static1
Behavioral task
behavioral1
Sample
83505070e643afd170792ca8546dd47fb1fe8739b1aa3e4f65985d559cae020b.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
83505070e643afd170792ca8546dd47fb1fe8739b1aa3e4f65985d559cae020b.exe
Resource
win10v2004-20231023-en
General
-
Target
83505070e643afd170792ca8546dd47fb1fe8739b1aa3e4f65985d559cae020b
-
Size
15.4MB
-
MD5
5816abbf66179a1f8dbe38824fcbc563
-
SHA1
f31d0f4bf669fbe90089e1c4b47beac667fc6b37
-
SHA256
83505070e643afd170792ca8546dd47fb1fe8739b1aa3e4f65985d559cae020b
-
SHA512
85fd2c140595535bce93847c4666abc8764a78a73ef322622ba7dc1686659429e6770cb126d82fb39eda8be743b99150cd4a72dbb84bb15f1b0ce34121023676
-
SSDEEP
393216:A0YUHb12sBYyXqo+gAAl6PXutUHdyl7z/:AzUHb1NXqohlua+Elv
Malware Config
Signatures
Files
-
83505070e643afd170792ca8546dd47fb1fe8739b1aa3e4f65985d559cae020b.exe windows:5 windows x86
db910c0f60f605cb07cdb84958da63ae
Code Sign
48:4c:0a:3e:df:9e:0f:8f:45:36:9a:b8:9b:f8:3a:e8Certificate
IssuerCN=Root AgencyNot Before10-09-2023 15:03Not After31-12-2039 23:59SubjectCN=清澈,O=清澈痒痒鼠,1.2.840.113549.1.9.1=#0c11313039323839343439374071712e636f6dc1:dc:57:4f:1e:71:a5:fa:99:e0:8a:5e:ff:7c:31:ff:fa:64:bf:81Signer
Actual PE Digestc1:dc:57:4f:1e:71:a5:fa:99:e0:8a:5e:ff:7c:31:ff:fa:64:bf:81Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
accept
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadStringA
CharUpperBuffW
gdi32
FillRgn
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetSaveFileNameA
advapi32
RegCreateKeyExA
shell32
SHBrowseForFolderA
ole32
CLSIDFromProgID
oleaut32
SafeArrayCreate
comctl32
ImageList_EndDrag
wldap32
ord29
Exports
Exports
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Sections
.text Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 746KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Krj Size: - Virtual size: 8.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.($< Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5e/ Size: 15.4MB - Virtual size: 15.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ