Static task
static1
Behavioral task
behavioral1
Sample
c19c89bad91284886ee2c600824ac7a1c445ae9bd4389d91a0e9d1bff3a3e23e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c19c89bad91284886ee2c600824ac7a1c445ae9bd4389d91a0e9d1bff3a3e23e.exe
Resource
win10v2004-20220812-en
General
-
Target
c19c89bad91284886ee2c600824ac7a1c445ae9bd4389d91a0e9d1bff3a3e23e
-
Size
23KB
-
MD5
2fff6443fa15eaad903cb88b03477499
-
SHA1
fb8e2a0fa490f159cee122eba1657ae34edc84d2
-
SHA256
c19c89bad91284886ee2c600824ac7a1c445ae9bd4389d91a0e9d1bff3a3e23e
-
SHA512
88710e675082b45cc92917f8290e284f884a70ef3e88821f5f1598e2947a011cb88ee47a5955ea0a83adabe09f87023534128d0b8957eec61981d73be0ad4107
-
SSDEEP
384:S7OwAl/FBpqdfrr56ic5pp1HV9R50QRfsDKUHxbOK461h1XXH5ZrMZZ:yAB3p6jIN1l50RDVHxD46JX35Z
Malware Config
Signatures
Files
-
c19c89bad91284886ee2c600824ac7a1c445ae9bd4389d91a0e9d1bff3a3e23e.exe windows x86
933e3e2440bc167e7e5455c1e42d3513
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
memset
_strnicmp
strncmp
strlen
strncpy
_strdup
free
strcpy
memcpy
strcat
localtime
mktime
gmtime
kernel32
GetModuleHandleA
HeapCreate
GetSystemDirectoryA
GetProcAddress
HeapDestroy
ExitProcess
CreateProcessA
GetThreadContext
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
SetThreadContext
ResumeThread
TerminateProcess
CloseHandle
GetWindowsDirectoryA
HeapFree
HeapAlloc
Sleep
GetDriveTypeA
FindFirstFileA
FindClose
WriteFile
CreateFileA
HeapReAlloc
GetLocalTime
wsock32
closesocket
WSACleanup
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
ioctlsocket
send
sendto
recvfrom
recv
WSAGetLastError
wininet
DeleteUrlCacheEntryA
Sections
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flat Size: 512B - Virtual size: 87B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE