Static task
static1
Behavioral task
behavioral1
Sample
34157d983c65d7a0b9a796d5e42363f744432599f0950384058ed9c0e21fac16.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34157d983c65d7a0b9a796d5e42363f744432599f0950384058ed9c0e21fac16.exe
Resource
win10v2004-20220812-en
General
-
Target
34157d983c65d7a0b9a796d5e42363f744432599f0950384058ed9c0e21fac16
-
Size
648KB
-
MD5
672a7cf910d63af8d0c43fc3a3210f1a
-
SHA1
049a1fe9c45210b3f4ccb495c5794b61347cc25e
-
SHA256
34157d983c65d7a0b9a796d5e42363f744432599f0950384058ed9c0e21fac16
-
SHA512
3d849817f515ba5ac626e77ef03c7b258c2f1e269ca47d4e460f46c3aa1f8230e9e0af235f9fd9f068e648a28ddc236ca36e24f9d282e1ee882ef0db617a91e4
-
SSDEEP
6144:/ZcskFkT0ReFUVZ8C6bT7S3EtWRpkKcp:RcskFkT0QFUPnEtWRpdcp
Malware Config
Signatures
Files
-
34157d983c65d7a0b9a796d5e42363f744432599f0950384058ed9c0e21fac16.exe windows x86
ac6305624235a753f2eab3afba0faceb
Headers
Imports
ws2_32
inet_addr
connect
WSACleanup
WSAStartup
socket
setsockopt
ioctlsocket
htons
bind
listen
send
select
__WSAFDIsSet
accept
recv
closesocket
kernel32
CreateFileMappingA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitThread
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemDirectoryA
GetLocalTime
Sleep
MultiByteToWideChar
ReadFile
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
GetLastError
CreateThread
GetFileSize
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
SetFileTime
GetFileTime
CreateProcessA
ExpandEnvironmentStringsA
SetFileAttributesA
GetTempPathA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
GetCurrentProcess
CreatePipe
GetVersionExA
GlobalMemoryStatus
ExitProcess
WideCharToMultiByte
GetComputerNameA
TerminateProcess
DeleteFileA
GetCurrentProcessId
CopyFileA
WaitForSingleObject
CreateMutexA
TerminateThread
MoveFileA
SetConsoleCtrlHandler
GetLocaleInfoA
GetLogicalDrives
WaitForMultipleObjects
GenerateConsoleCtrlEvent
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
Sections
Size: 644KB - Virtual size: 644KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE