Static task
static1
Behavioral task
behavioral1
Sample
afcbbdff2411a4ddffcd0a14a0a81b91745da3bb96c5a81e71b78d6b20489573.exe
Resource
win7-20220901-en
General
-
Target
afcbbdff2411a4ddffcd0a14a0a81b91745da3bb96c5a81e71b78d6b20489573
-
Size
242KB
-
MD5
67ba4bf928fc2fdd7bcd737887af5910
-
SHA1
7f4fe46d76f3f21cbe28bef38e7278af13881d8a
-
SHA256
afcbbdff2411a4ddffcd0a14a0a81b91745da3bb96c5a81e71b78d6b20489573
-
SHA512
7a4ac004b3a1ee48ee9d7e6eed1bf62ec045254b04721da194a8a57195f625e2bf7cd2f45752e37183976fb46455debb742ad7e15a28fa43d88b5bf8f13da444
-
SSDEEP
6144:oCBSa+iBBu+/M0IqPM0KZYCf0Jf5HQml2EQKB:oCEa+iHj/M0IL0KHfyfp27KB
Malware Config
Signatures
Files
-
afcbbdff2411a4ddffcd0a14a0a81b91745da3bb96c5a81e71b78d6b20489573.exe windows x86
4fc3818b0d7b8775e2088938f94b36a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
GetCommandLineW
CloseHandle
CreateProcessW
MoveFileExW
GetLastError
WaitForSingleObject
TerminateProcess
Sleep
SetFileAttributesW
GetFileAttributesW
Process32NextW
lstrlenA
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
MultiByteToWideChar
FindClose
FindNextFileW
FindFirstFileW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateDirectoryW
GetModuleFileNameW
GetModuleHandleW
lstrlenW
WideCharToMultiByte
GetLongPathNameW
Module32FirstW
GetCurrentProcessId
CreateFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcessTimes
GetCurrentProcess
GetCurrentThreadId
GetLocalTime
WriteFile
SetFilePointer
GetPrivateProfileStringW
WritePrivateProfileStringW
ExitProcess
GenerateConsoleCtrlEvent
CopyFileA
CreateDirectoryA
GetFileAttributesA
GetFileSize
FlushFileBuffers
ReadFile
DeleteFileA
CreateFileA
UnlockFileEx
UnlockFile
LockFileEx
LockFile
Module32First
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryA
SetEndOfFile
Process32Next
Process32First
GetSystemInfo
GetStartupInfoW
SleepEx
user32
MessageBoxW
shell32
SHGetSpecialFolderPathW
SHFileOperationW
ole32
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
psapi
GetModuleFileNameExA
GetModuleFileNameExW
ws2_32
WSAStartup
send
closesocket
htonl
ntohl
inet_ntoa
gethostbyname
getsockopt
htons
__WSAFDIsSet
select
ntohs
inet_addr
recv
accept
connect
WSACleanup
socket
setsockopt
ioctlsocket
listen
bind
WSAGetLastError
shlwapi
PathFileExistsW
msvcrt
??2@YAPAXI@Z
_wcsicmp
_waccess
memcpy
_snprintf
wcsstr
wcsrchr
_snwprintf
memmove
wcstok
localtime
time
strncpy
free
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
malloc
_assert
rand
srand
calloc
_ftol
_stricmp
strchr
strtol
strtod
atof
toupper
fprintf
_iob
mbstowcs
setlocale
wcstombs
tolower
_pctype
_isctype
__mb_cur_max
mktime
vfprintf
_vsnprintf
strrchr
__dllonexit
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
wcschr
memset
_wtoi
_vsnwprintf
_wcslwr
wcsncat
wcslen
wcsncpy
__CxxFrameHandler
strlen
_strdup
_open
_close
_utime
strspn
atoi
memchr
strstr
_errno
asctime
gmtime
_lseeki64
_pipe
_popen
_pclose
getenv
_get_osfhandle
_fullpath
signal
fclose
fflush
fopen
fscanf
_mkdir
_stat
_fstat
sprintf
_strnicmp
winmm
timeBeginPeriod
timeKillEvent
timeSetEvent
timeGetDevCaps
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE