Static task
static1
Behavioral task
behavioral1
Sample
9e3629ea9c9cb0192ab46787a0912f06014f6f85ba5574ca735b87389e0e9892.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e3629ea9c9cb0192ab46787a0912f06014f6f85ba5574ca735b87389e0e9892.exe
Resource
win10v2004-20220812-en
General
-
Target
9e3629ea9c9cb0192ab46787a0912f06014f6f85ba5574ca735b87389e0e9892
-
Size
364KB
-
MD5
058cb68d200e60c5df1988d5f30d62d0
-
SHA1
5187df62e21b564d6fb16416db86efda20027964
-
SHA256
9e3629ea9c9cb0192ab46787a0912f06014f6f85ba5574ca735b87389e0e9892
-
SHA512
826cd94c7cfa869d74fc075a5f2c8e0a585d5b070a24b4c89673b531eef79117a2a2553148764dd12fe2c1c35a1d2ef8198a9a10e8e063141ef16907b1504861
-
SSDEEP
6144:fz5M0pS7QG9hf6A/e+tiQm9QpmXzySf3PS06lesnF8dgOORzk:fzBobl/LtiZ9QsXzQNnydgOZ
Malware Config
Signatures
Files
-
9e3629ea9c9cb0192ab46787a0912f06014f6f85ba5574ca735b87389e0e9892.exe windows x86
69f26987b7d771738e05f04709b00151
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
recvfrom
sendto
inet_addr
inet_ntoa
WSAEventSelect
accept
shutdown
htonl
recv
bind
connect
listen
ntohl
gethostbyname
select
ntohs
WSAGetLastError
closesocket
send
setsockopt
WSAStartup
socket
ioctlsocket
iphlpapi
GetAdaptersInfo
imagehlp
MapFileAndCheckSumW
drreport
CreateDrReport
kernel32
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
CreateFileA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetConsoleCP
LoadLibraryA
GetFullPathNameW
HeapCreate
GetACP
GetDriveTypeA
SetCurrentDirectoryW
GetSystemDefaultLangID
GetModuleFileNameW
ExitProcess
CreateMutexW
CreateEventW
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileSectionNamesA
GetLastError
WaitForSingleObject
GetTickCount
Sleep
GetSystemTime
CopyFileW
SetEvent
CreateFileMappingW
CloseHandle
CreateThread
MultiByteToWideChar
InterlockedDecrement
WideCharToMultiByte
InitializeCriticalSection
GetFileSize
GetCurrentProcess
ReleaseMutex
QueryPerformanceCounter
SetFileAttributesW
LeaveCriticalSection
GetFileAttributesW
EnterCriticalSection
CreateFileW
TerminateThread
WaitForMultipleObjects
GetExitCodeThread
FindNextFileW
FindClose
FindFirstFileW
GetLocalTime
ReadFile
SetFilePointer
WriteFile
RemoveDirectoryW
SystemTimeToFileTime
CreateDirectoryW
DeleteFileW
GetTempPathW
GetTempFileNameW
SearchPathW
VirtualAlloc
SetEndOfFile
GetFileTime
CreateProcessW
GetCurrentDirectoryW
GetPrivateProfileStringA
SetFileTime
TerminateProcess
ResetEvent
LocalFileTimeToFileTime
FileTimeToSystemTime
GetModuleFileNameA
GetStdHandle
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetConsoleMode
VirtualFree
DeleteCriticalSection
HeapDestroy
HeapReAlloc
RaiseException
GetStartupInfoA
GetVersionExA
GetCommandLineA
GetFileAttributesA
GetDriveTypeW
FileTimeToLocalFileTime
InterlockedExchange
InterlockedIncrement
HeapFree
GetProcessHeap
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileA
HeapAlloc
GetTimeZoneInformation
user32
ShowWindow
wsprintfW
RegisterClassW
GetSysColorBrush
LoadCursorW
PostQuitMessage
DispatchMessageW
CreateWindowExW
TranslateMessage
MessageBoxW
DefWindowProcW
PostMessageW
GetMessageW
Sections
.text Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE