Static task
static1
Behavioral task
behavioral1
Sample
aa698790de88ba60bf32c7f0278561e6575c4554dd121b76416e3ac1200082f7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aa698790de88ba60bf32c7f0278561e6575c4554dd121b76416e3ac1200082f7.exe
Resource
win10v2004-20220901-en
General
-
Target
aa698790de88ba60bf32c7f0278561e6575c4554dd121b76416e3ac1200082f7
-
Size
348KB
-
MD5
4be157ba0682d2f875b3e41ff1214a60
-
SHA1
cf97b4e2bf52e3ea93104d658a80eedda755d8dc
-
SHA256
aa698790de88ba60bf32c7f0278561e6575c4554dd121b76416e3ac1200082f7
-
SHA512
c2eaa26ee0d8c27a08607210a21cfbcf51260ce1c377bcc943eabe0184d96e18edfe8052bc4e5c5113c24a72cebec3c1850184f38d3116180091395f3d120dc9
-
SSDEEP
6144:giIircCjF/LjjMsC6B2CK7Ld3Qt6TBbgbZogffS06eD2+OpPlD:giIhkniU2/7LVQkBbY3D2T9
Malware Config
Signatures
Files
-
aa698790de88ba60bf32c7f0278561e6575c4554dd121b76416e3ac1200082f7.exe windows x86
ae5c3b3c99d128ee3bbd25e93fa4a169
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohl
recvfrom
sendto
inet_addr
inet_ntoa
WSAEventSelect
accept
shutdown
htons
recv
bind
connect
listen
ntohs
gethostbyname
select
htonl
WSAGetLastError
closesocket
send
setsockopt
WSAStartup
socket
ioctlsocket
iphlpapi
GetAdaptersInfo
imagehlp
MapFileAndCheckSumW
drreport
CreateDrReport
kernel32
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
IsValidCodePage
GetOEMCP
CreateFileA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
VirtualFree
LoadLibraryA
GetCurrentDirectoryA
GetACP
GetDriveTypeA
GetSystemDefaultLangID
SetCurrentDirectoryW
ExitProcess
GetModuleFileNameW
CreateMutexW
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileSectionNamesA
GetLastError
WaitForSingleObject
GetTickCount
Sleep
GetSystemTime
CopyFileW
SetEvent
CreateFileMappingW
CloseHandle
CreateThread
CreateEventW
MultiByteToWideChar
InterlockedDecrement
WideCharToMultiByte
DeleteCriticalSection
GetCurrentProcess
QueryPerformanceCounter
SetFileAttributesW
LeaveCriticalSection
GetFileAttributesW
EnterCriticalSection
CreateFileW
InitializeCriticalSection
GetFileSize
WaitForMultipleObjects
GetExitCodeThread
TerminateThread
FindNextFileW
FindClose
FindFirstFileW
GetLocalTime
ReadFile
SetFilePointer
WriteFile
RemoveDirectoryW
SystemTimeToFileTime
CreateDirectoryW
GetTempFileNameW
DeleteFileW
GetTempPathW
SearchPathW
HeapDestroy
SetEndOfFile
GetFileTime
CreateProcessW
GetCurrentDirectoryW
GetPrivateProfileStringA
SetFileTime
TerminateProcess
ResetEvent
LocalFileTimeToFileTime
FileTimeToSystemTime
GetModuleFileNameA
GetStdHandle
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualAlloc
HeapReAlloc
ReleaseMutex
GetFullPathNameW
HeapCreate
RaiseException
GetStartupInfoA
GetVersionExA
GetCommandLineA
GetFileAttributesA
GetDriveTypeW
FileTimeToLocalFileTime
InterlockedExchange
InterlockedIncrement
HeapFree
GetProcessHeap
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileA
HeapAlloc
GetTimeZoneInformation
user32
LoadCursorW
wsprintfW
GetMessageW
RegisterClassW
DefWindowProcW
PostQuitMessage
DispatchMessageW
CreateWindowExW
MessageBoxW
TranslateMessage
GetSysColorBrush
PostMessageW
ShowWindow
Sections
.text Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE