Static task
static1
Behavioral task
behavioral1
Sample
74be46ea6cfd3fcd88ebb3da24ae97229405df3fd92f4909c7f7257e62bc5945.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74be46ea6cfd3fcd88ebb3da24ae97229405df3fd92f4909c7f7257e62bc5945.exe
Resource
win10v2004-20220812-en
General
-
Target
74be46ea6cfd3fcd88ebb3da24ae97229405df3fd92f4909c7f7257e62bc5945
-
Size
299KB
-
MD5
5a8d9e4f7e65cb2b42a66aee1437c971
-
SHA1
9af796c68fa4756263b45df3d21aa28a8a356f78
-
SHA256
74be46ea6cfd3fcd88ebb3da24ae97229405df3fd92f4909c7f7257e62bc5945
-
SHA512
02893a53487f1fff64e16ee9b16a96281016a778d554437409acc43ed9aac0aa4e5347739d61f46417cad1ceb5f96f15f1ca7b7fa169ec617940ac0a41894bf3
-
SSDEEP
6144:6JCLI4IWVn/nWv9RLEWcGxm93bM0Wg2YVvXV2KxJQb1doLAIGDLge:6XyVnQRLEWcGqnWlYVvXV5YeL7GDLge
Malware Config
Signatures
Files
-
74be46ea6cfd3fcd88ebb3da24ae97229405df3fd92f4909c7f7257e62bc5945.exe windows x86
d7b5a0bb34cfb23196d52d2221018637
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
socket
gethostbyname
htons
WSAStartup
shutdown
accept
listen
bind
recv
connect
send
closesocket
WSACleanup
psapi
EnumProcessModules
GetModuleFileNameExA
kernel32
Sleep
SetErrorMode
GetConsoleWindow
CreateMutexA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetLastError
GetTickCount
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLogicalDriveStringsA
GetDriveTypeA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
GetModuleFileNameA
GetTempPathA
CreateProcessA
Process32Next
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
CreateThread
GlobalAlloc
user32
ShowWindow
wsprintfA
IsCharAlphaNumericA
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_itoa
_strdup
_strcmpi
strcat
__setusermatherr
_initterm
__getmainargs
_acmdln
atoi
strlen
fclose
_unlink
fgets
strcpy
fopen
_except_handler3
calloc
isxdigit
fputs
rand
strstr
strrchr
strcmp
fwrite
ftell
fseek
memset
sprintf
strtok
printf
free
srand
__p___argv
__p___argc
_CxxThrowException
??3@YAXPAX@Z
_exit
_XcptFilter
exit
oleaut32
GetErrorInfo
Sections
.bss Size: - Virtual size: 225KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE