Static task
static1
Behavioral task
behavioral1
Sample
c62ccc51d20a2a64c8b7fd4a45c44fba16382710a99aa3c061e834e026b0e54a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c62ccc51d20a2a64c8b7fd4a45c44fba16382710a99aa3c061e834e026b0e54a.exe
Resource
win10v2004-20220812-en
General
-
Target
c62ccc51d20a2a64c8b7fd4a45c44fba16382710a99aa3c061e834e026b0e54a
-
Size
126KB
-
MD5
058d821ed564beb9a5032b0f7a2a9283
-
SHA1
a7d15e6faa5ef6c4191bb898a0d95e3dcbe2761c
-
SHA256
c62ccc51d20a2a64c8b7fd4a45c44fba16382710a99aa3c061e834e026b0e54a
-
SHA512
76ba4e769772865f28841df9490f84c0c930b4a0fa9920c59aa021c2395aa7983791ed42965f644fa70ab9c79b3c43d4daeaa2a11bd278ab89df919dc1523d8c
-
SSDEEP
3072:E0MMiz5DUZQd7yhg0cupBIUIGGGU7kGCGGGGRG9:E0pizgyyhNBBk
Malware Config
Signatures
Files
-
c62ccc51d20a2a64c8b7fd4a45c44fba16382710a99aa3c061e834e026b0e54a.exe windows x86
47a0566cda8285c1a812e821d9cb0e81
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrIA
iphlpapi
GetAdaptersInfo
psapi
GetModuleFileNameExA
shell32
CommandLineToArgvW
ws2_32
gethostbyname
WSAGetLastError
ioctlsocket
select
__WSAFDIsSet
inet_addr
kernel32
GetCommandLineW
WideCharToMultiByte
GetFileAttributesA
CreateDirectoryA
WriteFile
CreateFileA
GetFileSize
ReadFile
VirtualFree
CreateThread
Sleep
DeleteFileA
VirtualAlloc
GetTickCount
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetModuleHandleA
TerminateProcess
GetExitCodeProcess
ExitProcess
SetLastError
user32
IsCharAlphaNumericA
wsprintfA
advapi32
RegCreateKeyExA
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ