Static task
static1
Behavioral task
behavioral1
Sample
b07bce54bd28587d868362b29b7b285a153d35d0f6b36a36dea95761aa595714.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b07bce54bd28587d868362b29b7b285a153d35d0f6b36a36dea95761aa595714.exe
Resource
win10v2004-20220901-en
General
-
Target
b07bce54bd28587d868362b29b7b285a153d35d0f6b36a36dea95761aa595714
-
Size
201KB
-
MD5
90f637d441d01a07d55691ae37d31740
-
SHA1
f32f447e0bfdc442fb7db82427ad30e75b0c24fc
-
SHA256
b07bce54bd28587d868362b29b7b285a153d35d0f6b36a36dea95761aa595714
-
SHA512
fd6a1db0333a7d5f560e9f9cbddec5976191862e319991926a01b9f9e283f5cb71fa2a0d1875c7ab5b82798632c024d7edc74c6ea886a9ae1d5bb22284b115b1
-
SSDEEP
3072:qEijjo4mzM+8X48etlY8e953ymb0eEcJmr:lg48fj3nb0Hr
Malware Config
Signatures
Files
-
b07bce54bd28587d868362b29b7b285a153d35d0f6b36a36dea95761aa595714.exe windows x86
26204388eb97337403351eb338756df1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
GetTempPathA
GetSystemTime
SetFilePointer
WriteFile
CreateFileA
TerminateProcess
GetCurrentProcess
lstrcmpiA
GetVersionExA
GetModuleHandleA
CloseHandle
ReadFile
LoadLibraryA
GetProcAddress
GetTickCount
lstrlenA
CreateProcessA
GetModuleFileNameA
LCMapStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
LCMapStringW
GetStringTypeA
MultiByteToWideChar
GetLastError
RtlUnwind
GetFileType
ExitProcess
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
ws2_32
WSAStartup
inet_addr
connect
recv
send
htons
gethostbyname
socket
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ