Static task
static1
Behavioral task
behavioral1
Sample
7e80ca797b1b8e9e98532a48e1c76c79a57ca3bc9072bee429a8c6d4b770f2d2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7e80ca797b1b8e9e98532a48e1c76c79a57ca3bc9072bee429a8c6d4b770f2d2.exe
Resource
win10v2004-20220812-en
General
-
Target
7e80ca797b1b8e9e98532a48e1c76c79a57ca3bc9072bee429a8c6d4b770f2d2
-
Size
112KB
-
MD5
804decca9fcd538a155c354bdc5a4e80
-
SHA1
a7c61d2685e53a0a6d382124c81a5f7b0831ef37
-
SHA256
7e80ca797b1b8e9e98532a48e1c76c79a57ca3bc9072bee429a8c6d4b770f2d2
-
SHA512
ae7be14de6a3f40cc62f7a59edb1aba78d452e656a23099195c0f1274e6593a59827b5006f52374abc9d0a39d3aac1fafe03f5a36bbd58dc6a17cce0d7ad3642
-
SSDEEP
3072:AM0zcSVq7HSDsfxqn0owcWSDADeak7dJHB/AdG4:AM85BFWSsQLH5AdH
Malware Config
Signatures
Files
-
7e80ca797b1b8e9e98532a48e1c76c79a57ca3bc9072bee429a8c6d4b770f2d2.exe windows x86
aae61044da656182afa8e338eec3742f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
FillConsoleOutputAttribute
SetConsoleScreenBufferSize
GetStdHandle
CloseHandle
OpenMutexA
Sleep
HeapSize
GetProcAddress
GetVersion
FlushFileBuffers
ReadFile
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetFilePointer
GetLastError
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
WriteFile
ExitProcess
HeapFree
SetConsoleTextAttribute
HeapReAlloc
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
VirtualAlloc
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetFileType
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
winmm
timeGetTime
wsock32
gethostbyname
recvfrom
getsockopt
socket
htons
bind
gethostname
WSACleanup
setsockopt
inet_ntoa
sendto
closesocket
WSAGetLastError
WSAStartup
htonl
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE