Static task
static1
Behavioral task
behavioral1
Sample
66e2924598475f91962b91d29feba8b83317dbaedac3ed1e077d79e4cac25ddf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
66e2924598475f91962b91d29feba8b83317dbaedac3ed1e077d79e4cac25ddf.exe
Resource
win10v2004-20220901-en
General
-
Target
66e2924598475f91962b91d29feba8b83317dbaedac3ed1e077d79e4cac25ddf
-
Size
170KB
-
MD5
72d3478bd0c0f31ff0ca19bb096130a8
-
SHA1
d86416279916cba2716e90264c082f9da2240c36
-
SHA256
66e2924598475f91962b91d29feba8b83317dbaedac3ed1e077d79e4cac25ddf
-
SHA512
566527ab20ce004fd397764b642683ed77fa3fabedd32e2e0d58ae0e6b4c530310152b6ffb1b265b2f8d5de3eb51c7cff6bffdf5bfbe2a045f0e0617bcaa5ee9
-
SSDEEP
3072:SyPevd8s7ZeqSBlnb/YlSFc6yum7c3tw+T++Elaqurlc14lYdrKe439pdp:SSs7klBpb/tRyuVdwhl/urC1GY4L9bp
Malware Config
Signatures
Files
-
66e2924598475f91962b91d29feba8b83317dbaedac3ed1e077d79e4cac25ddf.exe windows x86
4369367d6d086d10eada9a99cef12440
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
shutdown
connect
send
kernel32
GetCurrentProcess
FlushFileBuffers
SetStdHandle
LCMapStringW
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetSystemTime
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
CloseHandle
ExitProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
VirtualQuery
InterlockedExchange
SetFilePointer
VirtualProtect
GetSystemInfo
GetLocaleInfoA
LCMapStringA
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ