Static task
static1
Behavioral task
behavioral1
Sample
4d162c8f1a27d5cf457b732f4f797f6cec6a141caa29972d741cd20563fdf485.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d162c8f1a27d5cf457b732f4f797f6cec6a141caa29972d741cd20563fdf485.exe
Resource
win10v2004-20220812-en
General
-
Target
4d162c8f1a27d5cf457b732f4f797f6cec6a141caa29972d741cd20563fdf485
-
Size
1.2MB
-
MD5
81223e26e77c1328f4b705275c0994d5
-
SHA1
2f59b63e00558abddda2eaf577c5e3108b7616f3
-
SHA256
4d162c8f1a27d5cf457b732f4f797f6cec6a141caa29972d741cd20563fdf485
-
SHA512
37010f0565a4fa3b78cf7eee621d44f3468dd049cbdb2c79a0035e0f7c0b95a493edbe555a08d01e0e678a93f7435dace676dff6d947874ee262a7c9aee49c32
-
SSDEEP
6144:XGKbfnbdHKDiw5Int5qU6436vywAezcuJhoXEZgusLU:XGKjnbdHKDB5C4BzNGX5uEU
Malware Config
Signatures
Files
-
4d162c8f1a27d5cf457b732f4f797f6cec6a141caa29972d741cd20563fdf485.exe windows x86
5a207c6e40d59ea8df23351ab58bccbf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACleanup
WSAStartup
setsockopt
bind
listen
select
__WSAFDIsSet
accept
gethostbyname
shutdown
inet_addr
htons
recv
send
socket
ioctlsocket
connect
closesocket
kernel32
C0C0F26D
B746B1DB
5BF25B6C
F219C1CE
D564D41F
DE096730
67E343AD
C4812168
6D6ABBCA
89C1D0E3
0C9EDD13
265DA0FA
8FC4583D
DCA92A8B
7C1ED915
2B0115AB
82EA8F09
3F388EC7
FE32E506
F2852B34
5E1A6482
4A1A882F
C22328DB
2F52E5FA
DFC31CCA
747E9C21
E4E5ECA9
CD02D8D4
11EE8CBB
1F5D2064
D4350CEF
B1A2A303
AC8C288E
1DF1978A
BAC85FC3
F48EB9BD
D07CBC86
75858ED1
733CE2B6
FF5B7E2B
C87BAB0D
0B7D586E
03F419A9
93EA54D1
8A4FA758
952E3DA1
0AF3C5A8
1AB3058B
E88B8A95
632BA0F1
536C6C90
D777FA0C
6288CDEA
083C609F
D8E36C3D
1FC46D23
B43BD69F
C3A99A02
EF1A7145
5224AA74
A90DFEC1
886EAA9A
A7432796
AF7E002B
6D389DC4
3DC71C02
843EA1D6
66EE4EA1
9487591C
FB993AE5
B7C168C9
99C035E9
A9C0075C
EC6F451F
41C3A7A8
GetCurrentProcess
CD283D07
9E1FC777
240F516C
ExitProcess
94CF1258
E5B3252F
83B04291
GetCurrentProcessId
46B65E9B
31CEA9E0
9A34CB01
50F653A5
6A88C470
56C62E24
C8FC0030
B46F117E
695BEC40
0A536906
55072A20
C5F663E6
F9C6D7A7
GetCommandLineA
GetVersion
3F5FDE17
6FEE4097
1B76431A
44FB52A0
C27B7FFA
6B90E558
A6AF138B
3F409F55
Sections
Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE