Static task
static1
Behavioral task
behavioral1
Sample
b11cec2e1669ecdd12fd538ecc2c1e5a59cee658865fc583fcc8dd0ab48a0a43.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b11cec2e1669ecdd12fd538ecc2c1e5a59cee658865fc583fcc8dd0ab48a0a43.exe
Resource
win10v2004-20220812-en
General
-
Target
b11cec2e1669ecdd12fd538ecc2c1e5a59cee658865fc583fcc8dd0ab48a0a43
-
Size
109KB
-
MD5
03671f08072a12d58b24662a994feb3a
-
SHA1
1faa6c94c65c3ae30a41078fed3cbfef9aa51d07
-
SHA256
b11cec2e1669ecdd12fd538ecc2c1e5a59cee658865fc583fcc8dd0ab48a0a43
-
SHA512
7966fcc94ae975e606b37180f3367786aff244e84dd76ad2e7a2a7faaedab8aafad200cbd75f6f771044a8e4ac359f568beaf995fb3d845ec920a8f4543b2e22
-
SSDEEP
1536:TTnzwx7dkKKqIeTlb/3z1hxOvftwnFFM0NfxQDsV1aiKHCRtfEBJkznYl8:TT0x7WKVfToYFz7JiuEBCrl
Malware Config
Signatures
Files
-
b11cec2e1669ecdd12fd538ecc2c1e5a59cee658865fc583fcc8dd0ab48a0a43.exe windows x86
6c59bdf8b590a8b62d44651e92535cfd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
connect
select
shutdown
recv
socket
closesocket
gethostbyname
send
kernel32
GetSystemTimeAsFileTime
QueryPerformanceCounter
LoadLibraryA
GetModuleHandleA
GetThreadContext
SetThreadContext
InitializeCriticalSection
FreeLibrary
GetProcAddress
GetTickCount
CreateFileA
GetCommState
SleepEx
WriteFile
SetCommState
SetCommTimeouts
Sleep
ReadFile
PurgeComm
CloseHandle
ExitProcess
SetConsoleCtrlHandler
SetEvent
WaitForSingleObject
CreateEventA
GetProcessAffinityMask
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetCurrentProcessId
TlsAlloc
SetLastError
TlsGetValue
GetThreadPriority
DuplicateHandle
GetCurrentThread
GetCurrentThreadId
TlsSetValue
TlsFree
DeleteCriticalSection
msvcr71
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
?terminate@@YAXXZ
_controlfp
__security_error_handler
__setusermatherr
sprintf
sscanf
memmove
strncpy
ctime
??3@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
time
strstr
fgets
fopen
fprintf
fclose
rand
srand
vsprintf
printf
strncat
strncmp
atoi
_getch
_purecall
calloc
free
malloc
_endthreadex
longjmp
exit
__CxxFrameHandler
_CxxThrowException
_callnewh
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
__dllonexit
_onexit
??1type_info@@UAE@XZ
_c_exit
_exit
_XcptFilter
_cexit
__p___initenv
_amsg_exit
__getmainargs
_initterm
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bqmilaa Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE