Static task
static1
Behavioral task
behavioral1
Sample
9a4123ccb15122b2034091a3e23f8960124f2e32dea09f0431e61e9153f4a010.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a4123ccb15122b2034091a3e23f8960124f2e32dea09f0431e61e9153f4a010.exe
Resource
win10v2004-20220812-en
General
-
Target
9a4123ccb15122b2034091a3e23f8960124f2e32dea09f0431e61e9153f4a010
-
Size
119KB
-
MD5
6690dc0c169153149e0a0df615420ef0
-
SHA1
998c7c39e326c403b698c9e5ed73ff6c0d64bc2a
-
SHA256
9a4123ccb15122b2034091a3e23f8960124f2e32dea09f0431e61e9153f4a010
-
SHA512
8079bde911e39f483f67d6e22cebc28f6b43f433f1b4821c4b913e4f0435ba8282e58dce55db6afd00814096f6b4914421c1de12f7684600c43fe2dd4ea592de
-
SSDEEP
3072:K9JCLbKv747dQdcTRfnyoR0MWv9Rm2IauTi0QraCpzWez:6JCLI4IWVn/nWv9R3IaUcaCpSK
Malware Config
Signatures
Files
-
9a4123ccb15122b2034091a3e23f8960124f2e32dea09f0431e61e9153f4a010.exe windows x86
d7b5a0bb34cfb23196d52d2221018637
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
socket
gethostbyname
htons
WSAStartup
shutdown
accept
listen
bind
recv
connect
send
closesocket
WSACleanup
psapi
EnumProcessModules
GetModuleFileNameExA
kernel32
Sleep
SetErrorMode
GetConsoleWindow
CreateMutexA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetLastError
GetTickCount
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLogicalDriveStringsA
GetDriveTypeA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
GetModuleFileNameA
GetTempPathA
CreateProcessA
Process32Next
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
CreateThread
GlobalAlloc
user32
ShowWindow
wsprintfA
IsCharAlphaNumericA
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_itoa
_strdup
_strcmpi
strcat
__setusermatherr
_initterm
__getmainargs
_acmdln
atoi
strlen
fclose
_unlink
fgets
strcpy
fopen
_except_handler3
calloc
isxdigit
fputs
rand
strstr
strrchr
strcmp
fwrite
ftell
fseek
memset
sprintf
strtok
printf
free
srand
__p___argv
__p___argc
_CxxThrowException
??3@YAXPAX@Z
_exit
_XcptFilter
exit
oleaut32
GetErrorInfo
Sections
.bss Size: - Virtual size: 225KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE