Static task
static1
Behavioral task
behavioral1
Sample
0a1d974622a757d3d8f713e44b09bf1152f5ae8de8ea7d86e9ff5bf0cb922641.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a1d974622a757d3d8f713e44b09bf1152f5ae8de8ea7d86e9ff5bf0cb922641.exe
Resource
win10v2004-20220812-en
General
-
Target
0a1d974622a757d3d8f713e44b09bf1152f5ae8de8ea7d86e9ff5bf0cb922641
-
Size
76KB
-
MD5
63d0fb00e810a8d7795b103cc3dfb5de
-
SHA1
f9a9aeaa2e5fd169e57bd7c0176e01c78c6e898c
-
SHA256
0a1d974622a757d3d8f713e44b09bf1152f5ae8de8ea7d86e9ff5bf0cb922641
-
SHA512
caa8a708b999b02beb713a00b0e7a9eccb161c7db9f298f79eeca3b9820bd7c4847f3241a944dd96b6aec55405ab0658501a6a891d70e816de1d26f0a8743533
-
SSDEEP
1536:nDCZ/IfLjvAXi/6TjgVLVTuRlL6kPWYiUao:igfAy5uXPWYiUao
Malware Config
Signatures
Files
-
0a1d974622a757d3d8f713e44b09bf1152f5ae8de8ea7d86e9ff5bf0cb922641.exe windows x86
61b8d1e3a9faf4bc7b9326ae0d9452fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostname
gethostbyname
WSASetEvent
WSAStartup
WSACleanup
WSACreateEvent
WSAEventSelect
WSACloseEvent
WSAEnumNetworkEvents
WSAAccept
inet_ntoa
WSARecv
WSASend
WSAGetLastError
WSAWaitForMultipleEvents
WSAResetEvent
WSAGetOverlappedResult
closesocket
shutdown
listen
inet_addr
htons
bind
WSASocketA
advapi32
RegOpenKeyA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
shell32
ShellExecuteA
SHGetFileInfoA
kernel32
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
VirtualFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetDriveTypeA
GetLogicalDrives
FindClose
GetLastError
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
DeleteFileA
CreateDirectoryA
RemoveDirectoryA
SetLastError
GlobalMemoryStatus
GetDiskFreeSpaceExA
lstrcmpiA
GetVersionExA
SetEndOfFile
LeaveCriticalSection
EnterCriticalSection
SetEvent
GetCurrentThreadId
CloseHandle
TerminateThread
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
CreateMutexA
GetCurrentDirectoryA
CopyFileA
GetModuleFileNameA
GetSystemDirectoryA
Sleep
WaitForMultipleObjects
ResetEvent
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryA
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TlsGetValue
TlsAlloc
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
ReadFile
WriteFile
HeapSize
HeapAlloc
HeapReAlloc
GetCurrentProcess
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetComputerNameA
RtlUnwind
CreateThread
TlsSetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
user32
BeginPaint
GetClientRect
DrawTextA
EndPaint
SendMessageA
PostQuitMessage
DefWindowProcA
CreateWindowExA
keybd_event
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
mouse_event
MessageBoxA
ShowWindow
gdi32
GetStockObject
SelectPalette
DeleteDC
GetDIBits
CreateFontIndirectA
DeleteObject
GetObjectA
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
CreateDCA
SetBkMode
SetTextColor
RealizePalette
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ