Static task
static1
Behavioral task
behavioral1
Sample
95027fb61e56db9f2307c21fc4f2004bc0857473430293cbfd34fe19776a9398.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
95027fb61e56db9f2307c21fc4f2004bc0857473430293cbfd34fe19776a9398.exe
Resource
win10v2004-20220901-en
General
-
Target
95027fb61e56db9f2307c21fc4f2004bc0857473430293cbfd34fe19776a9398
-
Size
315KB
-
MD5
6d11df387e3bd2667f9e296c373c8b98
-
SHA1
408618d25a8e4364aa2bc275c8d8421a89f2377c
-
SHA256
95027fb61e56db9f2307c21fc4f2004bc0857473430293cbfd34fe19776a9398
-
SHA512
5cb5d08a9ec901bb9fc4e613b94ef0dde927861b5d3fc679e2e7cef73c09c9e9ad27b6fdb4782f83d4af592524623ec784aecf63c99e6956939000d5babb3cf9
-
SSDEEP
6144:CiEYw3dkG8hlZ2bEmfED1VpFZ3WYjc7ZQkV+4HT/lgoydR95p5:R3yCGklZ2bEzD1PsLTlgoydR9h
Malware Config
Signatures
Files
-
95027fb61e56db9f2307c21fc4f2004bc0857473430293cbfd34fe19776a9398.exe windows x86
c6898ab877063d15da3dfec542f0f578
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
floor
ceil
_CIasin
strcmp
strcpy
sprintf
strncpy
strlen
strstr
memcpy
localtime
mktime
kernel32
GetModuleHandleA
HeapCreate
CreateThread
HeapDestroy
ExitProcess
GetCommandLineA
GetCurrentProcess
WideCharToMultiByte
HeapFree
Sleep
GetLocalTime
HeapReAlloc
HeapAlloc
CreateFileA
ReadFile
CloseHandle
wsock32
WSAGetLastError
closesocket
WSACleanup
WSAStartup
recv
send
htons
sendto
winmm
timeBeginPeriod
timeEndPeriod
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ