Static task
static1
Behavioral task
behavioral1
Sample
f11f2e81d101f39d885dce549c86cf04c18f2613230234073edf6584f2d31323.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f11f2e81d101f39d885dce549c86cf04c18f2613230234073edf6584f2d31323.exe
Resource
win10v2004-20220812-en
General
-
Target
f11f2e81d101f39d885dce549c86cf04c18f2613230234073edf6584f2d31323
-
Size
193KB
-
MD5
7a4a4c905452d0b47ee6cd8ca6df3920
-
SHA1
06ccdf22205ea64d812f7d66dd78e1ec8e91e413
-
SHA256
f11f2e81d101f39d885dce549c86cf04c18f2613230234073edf6584f2d31323
-
SHA512
986eac894cc7f43a3e53d948928d79cb03c6f4fa09951bb7cbade7181d9e50808e3ff802f8e35bea3b5839d409927524faef46aed0175a06848521d87ccac409
-
SSDEEP
3072:fv3WJsuB4dQSj9N3IM8lrP9VrWFgeStkCEIlKkWysThFYb0CV:f/WJsuB4xjL3IptLfeR9IwkUThFYb
Malware Config
Signatures
Files
-
f11f2e81d101f39d885dce549c86cf04c18f2613230234073edf6584f2d31323.exe windows x86
4f99833c7ecbe75b6e2d31f6b94b5e8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryW
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileW
MoveFileExA
GetDateFormatA
FreeResource
FindResourceA
LoadResource
GetSystemDirectoryW
CreateEventA
GlobalMemoryStatus
LeaveCriticalSection
FileTimeToLocalFileTime
DeviceIoControl
WaitForSingleObject
GetCurrentProcess
GetTempPathW
LoadLibraryW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
TlsSetValue
TlsAlloc
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
MoveFileW
GetStartupInfoA
ws2_32
WSAEnumNetworkEvents
WSACreateEvent
WSAGetOverlappedResult
WSASocketA
WSAAddressToStringA
WSAWaitForMultipleEvents
WSAConnect
msvcr71
malloc
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
time
strncmp
memmove
strchr
atoi
wcslen
exit
fclose
fwrite
fputs
fseek
fopen
free
realloc
__p__commode
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_controlfp
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ