Static task
static1
Behavioral task
behavioral1
Sample
f4fe345c30ac948dc1e55cc973b2ebae954507fec4224ae50ee66585d5bafc47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4fe345c30ac948dc1e55cc973b2ebae954507fec4224ae50ee66585d5bafc47.exe
Resource
win10v2004-20220901-en
General
-
Target
f4fe345c30ac948dc1e55cc973b2ebae954507fec4224ae50ee66585d5bafc47
-
Size
46KB
-
MD5
48ec0a36717536c4e652514a6e47fc20
-
SHA1
86a7fbd860b34e54a08f44b673d68ccbcd49b687
-
SHA256
f4fe345c30ac948dc1e55cc973b2ebae954507fec4224ae50ee66585d5bafc47
-
SHA512
9546ec18f960c8cb361801571e16760b21d8cacfede088281df70e72cc3f6daf4c5a95628925ca95c2e3d13beafe19af755ec15c853649d3a4078ef82e98c5c4
-
SSDEEP
768:f03ingvP0u3kiMAsPfrVjpgpkTZuDBpFkpmfG+7aexw8XiI7sTitWB6P4nE6bJG:f034y02kprVy0Zu1p0mfb2exw8a+tWBw
Malware Config
Signatures
Files
-
f4fe345c30ac948dc1e55cc973b2ebae954507fec4224ae50ee66585d5bafc47.exe windows x86
f3d8ed7fb4ee194890fe5a85e57f3b83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
recv
send
accept
socket
setsockopt
bind
listen
getsockname
closesocket
htons
WSAStartup
select
__WSAFDIsSet
htonl
ntohs
ntohl
kernel32
GetCurrentThreadId
Sleep
InterlockedExchange
InterlockedCompareExchange
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
msvcr80
_umask
_crt_debugger_hook
_controlfp_s
_invoke_watson
_chdir
_cexit
_close
malloc
_callnewh
__iob_func
fprintf
exit
sscanf
getenv
??3@YAXPAX@Z
strncmp
memcpy
fflush
vsprintf
printf
memset
perror
_errno
_amsg_exit
__getmainargs
_getpid
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aidugtj Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE