Static task
static1
Behavioral task
behavioral1
Sample
0d34bd22a3b6a3b7c9c5e6d7f53f51077449fbefdbba740c99023eeb2cb4a625.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d34bd22a3b6a3b7c9c5e6d7f53f51077449fbefdbba740c99023eeb2cb4a625.exe
Resource
win10v2004-20220812-en
General
-
Target
0d34bd22a3b6a3b7c9c5e6d7f53f51077449fbefdbba740c99023eeb2cb4a625.exe
-
Size
5KB
-
MD5
37cef35f558a1bdbc5e14487fc17bc9b
-
SHA1
59b7a9c0e10201ef260cd4a1c6613e4ce8cd3287
-
SHA256
0d34bd22a3b6a3b7c9c5e6d7f53f51077449fbefdbba740c99023eeb2cb4a625
-
SHA512
2d724d75b8e75dea9beda4bde096b6d7b7ce824fae1a03464082944966e484bc17abc6cc8a214e455880db5430fb949c0e52cc4c1314d6105206d485dbc62ad1
-
SSDEEP
48:qhYs1eVP0wHqR4/rDeK3F/ZNQ/oYH88iHxh6mAdLsDDAxMrMGTBF10i9GB8eyvVT:oq/qRoGK3FfQL8FHX3AZIDBTf160lU
Malware Config
Signatures
Files
-
0d34bd22a3b6a3b7c9c5e6d7f53f51077449fbefdbba740c99023eeb2cb4a625.exe.exe windows x86
74c6f8b09d1e54749ef6a61207027c13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtQuerySystemInformation
RtlAdjustPrivilege
RtlZeroMemory
kernel32
SetFilePointer
lstrcmpiW
CreateProcessW
CreateFileA
CreateEventA
CloseHandle
CreateThread
ExitProcess
ExitThread
FlushFileBuffers
GetFileSize
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
OpenProcess
ReadFile
ReadProcessMemory
SetEvent
WriteFile
Sleep
VirtualQueryEx
WaitForSingleObject
advapi32
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
ws2_32
WSAConnect
WSASocketA
WSAStartup
closesocket
gethostbyname
WSACleanup
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE