Static task
static1
Behavioral task
behavioral1
Sample
84ddcc76f5d83d2da0304b682aa70c835537eec08b3416683fa772f3a677bd24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84ddcc76f5d83d2da0304b682aa70c835537eec08b3416683fa772f3a677bd24.exe
Resource
win10v2004-20220812-en
General
-
Target
84ddcc76f5d83d2da0304b682aa70c835537eec08b3416683fa772f3a677bd24
-
Size
315KB
-
MD5
5654f603fed04751cf4520fc28498750
-
SHA1
288474fc6fbc80a9784dd6a28afca45d98c8bd53
-
SHA256
84ddcc76f5d83d2da0304b682aa70c835537eec08b3416683fa772f3a677bd24
-
SHA512
c0b337c22702266251b2600ad085f96cc4d7040b95a892ae61e292ca6e96cf27863321e6b1d9788a49d8493bc03924ec130b20b15860db2e99bc9387ed138bfd
-
SSDEEP
6144:CiEYw3dkG8hlZ2bEmfED1VpFZ3WYjc7ZQkV+4HT/lgoydR95pf:R3yCGklZ2bEzD1PsLTlgoydR9X
Malware Config
Signatures
Files
-
84ddcc76f5d83d2da0304b682aa70c835537eec08b3416683fa772f3a677bd24.exe windows x86
c6898ab877063d15da3dfec542f0f578
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
floor
ceil
_CIasin
strcmp
strcpy
sprintf
strncpy
strlen
strstr
memcpy
localtime
mktime
kernel32
GetModuleHandleA
HeapCreate
CreateThread
HeapDestroy
ExitProcess
GetCommandLineA
GetCurrentProcess
WideCharToMultiByte
HeapFree
Sleep
GetLocalTime
HeapReAlloc
HeapAlloc
CreateFileA
ReadFile
CloseHandle
wsock32
WSAGetLastError
closesocket
WSACleanup
WSAStartup
recv
send
htons
sendto
winmm
timeBeginPeriod
timeEndPeriod
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ