Static task
static1
Behavioral task
behavioral1
Sample
58a12828900a0fa10e60b5d706f5bf4f42e4243893ae58d236436da338543251.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58a12828900a0fa10e60b5d706f5bf4f42e4243893ae58d236436da338543251.exe
Resource
win10v2004-20220812-en
General
-
Target
58a12828900a0fa10e60b5d706f5bf4f42e4243893ae58d236436da338543251
-
Size
195KB
-
MD5
71fd0435a00a48ea1237bc5f703b5dd0
-
SHA1
7634710af5414dfd5061cc894488a233f3fbb165
-
SHA256
58a12828900a0fa10e60b5d706f5bf4f42e4243893ae58d236436da338543251
-
SHA512
afdad7dd38cf9a2758ef687971a4ff58fa05be88bcdc2255c4263ab12fa894bc0cdff8627842db500c4917acef52f6e57774c9e019f3febedc0f3908551dfe8f
-
SSDEEP
6144:jPcGQSgLVZYJ15pCxOQJBC2l64QxnxVBJoYdZ9:jESGYJVYBH6jZ1Jo03
Malware Config
Signatures
Files
-
58a12828900a0fa10e60b5d706f5bf4f42e4243893ae58d236436da338543251.exe windows x86
8f28a7003ddf0b3524db23ca5f3a72ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcat
strcmp
free
_except_handler3
strrchr
rename
_iob
atoi
_errno
wcscpy
strtok
vsprintf
strncat
rand
_beginthreadex
malloc
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcpy
memcmp
strlen
_ftol
memmove
_CxxThrowException
__CxxFrameHandler
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
calloc
memset
ws2_32
inet_addr
getsockname
bind
getpeername
accept
listen
WSAStartup
sendto
__WSAFDIsSet
gethostname
recv
send
select
closesocket
ntohs
socket
gethostbyname
htons
connect
setsockopt
WSACleanup
inet_ntoa
kernel32
LoadLibraryA
CloseHandle
GetModuleHandleA
GetStartupInfoA
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
GetProcAddress
Sections
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 165KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ