Static task
static1
Behavioral task
behavioral1
Sample
9a6f50b79a62e41a94f93b8d50bd28351849049177933936296c5ded33411ca0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9a6f50b79a62e41a94f93b8d50bd28351849049177933936296c5ded33411ca0.exe
Resource
win10v2004-20220901-en
General
-
Target
9a6f50b79a62e41a94f93b8d50bd28351849049177933936296c5ded33411ca0
-
Size
180KB
-
MD5
40eb3c6dea0ded52e95505775d914ceb
-
SHA1
7a28c03df8e850e94b228d7e85829e178d1394a2
-
SHA256
9a6f50b79a62e41a94f93b8d50bd28351849049177933936296c5ded33411ca0
-
SHA512
3f9a97137c256041f159c3b6c39a910625b979713f977bd184f2e362a7197e6f1cf9b1b9eef94c1904266acccee3aacc91e19205c6ce4fb5f863996a95a2ce80
-
SSDEEP
3072:QQWJNkwu0s5ph2ct7ATf1NhpKweOv3evx+QsmibFp0AnG9h9UP:Qc92QipKwwdCK9h6
Malware Config
Signatures
Files
-
9a6f50b79a62e41a94f93b8d50bd28351849049177933936296c5ded33411ca0.exe windows x86
51bcc3873f12447a2a3ae100f5879e02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
lstrcpyA
Sleep
FreeLibrary
GetCurrentProcess
DeleteFileA
SetUnhandledExceptionFilter
CreateThread
GetStartupInfoA
GetModuleHandleA
user32
MessageBoxA
wsprintfA
shell32
ShellExecuteA
msvcrt
_controlfp
_except_handler3
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
memmove
ceil
_ftol
strstr
??2@YAPAXI@Z
sprintf
exit
strtok
_beginthreadex
rand
atoi
strchr
srand
strncpy
strcspn
free
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
calloc
ws2_32
setsockopt
connect
htons
gethostbyname
socket
ntohs
recv
WSACleanup
select
send
inet_addr
inet_ntoa
sendto
WSASocketA
htonl
gethostname
WSAIoctl
WSAStartup
closesocket
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ