Static task
static1
Behavioral task
behavioral1
Sample
d063f6e4542e31348dee550ad24a26fc980173e1e15ebd5194f9dd10de5fbbd6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d063f6e4542e31348dee550ad24a26fc980173e1e15ebd5194f9dd10de5fbbd6.exe
Resource
win10v2004-20220812-en
General
-
Target
d063f6e4542e31348dee550ad24a26fc980173e1e15ebd5194f9dd10de5fbbd6
-
Size
145KB
-
MD5
908ae181094d1f346d033a21e6fd7b70
-
SHA1
48fd1ebaa5d75b26079b3d26980a9b3295cd7467
-
SHA256
d063f6e4542e31348dee550ad24a26fc980173e1e15ebd5194f9dd10de5fbbd6
-
SHA512
58f895ad6af07aa3dfb3afa4047d87a5ff4fbe9c8c502719d3ac1cb92c50949c1e895e9bc9c13c697f1d1afe4ae9e2ea2f92ed8f29f47f3e8d1f15495d6c4372
-
SSDEEP
3072:Iy/G3NbNM9fdI3FDmzDZ8OZnqp5QqnxsJv75HI:lsKrMszDZNSQUxOv+
Malware Config
Signatures
Files
-
d063f6e4542e31348dee550ad24a26fc980173e1e15ebd5194f9dd10de5fbbd6.exe windows x86
9f5f0ad92aece014f70756ed247d0911
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
inet_ntoa
recv
WSAStartup
socket
WSACleanup
gethostbyname
closesocket
inet_addr
htons
connect
send
gdi32
SetMapMode
LPtoDP
GetDeviceCaps
DPtoLP
GetStockObject
GetMapMode
kernel32
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
Sleep
GetModuleHandleA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetEnvironmentVariableA
CopyFileA
SetFileAttributesA
GetCommandLineA
SetEvent
CreateThread
CloseHandle
ReadFile
GetFileSize
CreateFileA
MulDiv
CompareStringA
CreateEventA
GetTickCount
GetTempPathA
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
CreateProcessA
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
CompareStringW
SetEnvironmentVariableA
WaitForSingleObject
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateDirectoryA
RtlUnwind
GetLastError
HeapFree
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
GetProcAddress
ExitProcess
RaiseException
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
user32
UpdateWindow
InvalidateRect
GetWindowDC
CreateIconFromResourceEx
GetTitleBarInfo
GetDesktopWindow
GetWindowRect
MoveWindow
PostQuitMessage
SetFocus
DefWindowProcA
BeginPaint
EndPaint
MessageBoxA
SetWindowTextA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyA
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE