Static task
static1
Behavioral task
behavioral1
Sample
3fd25aaa2b1fc9a9db0f8a1d5bbfa14a624922064039d8c0849defea1e7dd070.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3fd25aaa2b1fc9a9db0f8a1d5bbfa14a624922064039d8c0849defea1e7dd070.exe
Resource
win10v2004-20220812-en
General
-
Target
3fd25aaa2b1fc9a9db0f8a1d5bbfa14a624922064039d8c0849defea1e7dd070
-
Size
218KB
-
MD5
a8068055457daa6a9b15f469e39f9138
-
SHA1
2be7cdbdbebea6c3c953ac69d1e3a2eeaa3ab8c5
-
SHA256
3fd25aaa2b1fc9a9db0f8a1d5bbfa14a624922064039d8c0849defea1e7dd070
-
SHA512
b9fed132746211409d6d9424837ae808f5d3922b35f376596b9fc8ceb4aa361bb554ab133a8863e550128ff12cc1be32895756a14a48492c1b2a43e67b1f32f2
-
SSDEEP
6144:1xvEIsS/LGeAHiYFeg8b1g5a/2Gogk9qWOkQsp5wDchmemP2OTwAcB5ob05G+Crg:121
Malware Config
Signatures
Files
-
3fd25aaa2b1fc9a9db0f8a1d5bbfa14a624922064039d8c0849defea1e7dd070.exe windows x86
10b328b4162050f4496387308952f37c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strlen
strcpy
strcat
memcpy
_finite
_isnan
strncpy
memmove
malloc
free
kernel32
GetModuleHandleA
HeapCreate
GetProcAddress
HeapDestroy
ExitProcess
GlobalAlloc
GlobalFree
CloseHandle
CreateFileA
SetFilePointer
SetEndOfFile
HeapAlloc
WriteFile
HeapFree
FreeLibrary
LoadLibraryA
HeapReAlloc
wsock32
closesocket
WSACleanup
WSAStartup
connect
socket
inet_addr
gethostbyname
htons
bind
ioctlsocket
select
__WSAFDIsSet
Sections
.code Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ