Static task
static1
Behavioral task
behavioral1
Sample
90004abfc46766c43ab572ee36ac517227ae1e36c79c28c4c925a5236c44d9e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90004abfc46766c43ab572ee36ac517227ae1e36c79c28c4c925a5236c44d9e2.exe
Resource
win10v2004-20220812-en
General
-
Target
90004abfc46766c43ab572ee36ac517227ae1e36c79c28c4c925a5236c44d9e2
-
Size
46KB
-
MD5
387bfd64ae3fbb6286bfcecfa9a4aec0
-
SHA1
517708668981c4eaed271b08f6bc6e0970d1b56e
-
SHA256
90004abfc46766c43ab572ee36ac517227ae1e36c79c28c4c925a5236c44d9e2
-
SHA512
73020f45e587e5c2bb388b033f1a0e5be9cc0aebd72e2f68b5265973385d9e8876ec549bbd65524a2e4d8ef47a81e671f8311f4d4b7b4a308cca1afa50eeab37
-
SSDEEP
384:DJYpGqvU8fE/LmlY3nKb0w/p2tyV1mCiC0rJoiowAx/r6+e9Pfqbn1p:GbUHNKb08p2tGmzjrJoZxuha5p
Malware Config
Signatures
Files
-
90004abfc46766c43ab572ee36ac517227ae1e36c79c28c4c925a5236c44d9e2.exe windows x86
8b3dc194226f94cc5f691167b3665834
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetLastError
CreateMutexA
GetSystemDirectoryA
GetProcAddress
GetCurrentProcessId
CopyFileA
LoadLibraryA
GetVersion
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
FreeLibrary
Sleep
HeapCreate
GetModuleHandleA
GetStartupInfoA
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
LCMapStringW
GetStringTypeA
MultiByteToWideChar
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentStrings
HeapReAlloc
GetCommandLineA
HeapDestroy
VirtualFree
HeapFree
VirtualAlloc
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
user32
MessageBoxA
FindWindowExA
FindWindowA
SendMessageA
IsWindowVisible
GetDC
ReleaseDC
GetMessageA
gdi32
GetPixel
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
ws2_32
WSAStartup
gethostbyname
htons
connect
WSACleanup
send
socket
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE