Static task
static1
Behavioral task
behavioral1
Sample
1abc65682dd189ecfacb7a4acd764ba1e678efe5f53b7696b6298dffa395200d_unpacked.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1abc65682dd189ecfacb7a4acd764ba1e678efe5f53b7696b6298dffa395200d_unpacked.exe
Resource
win10v2004-20220812-en
General
-
Target
1abc65682dd189ecfacb7a4acd764ba1e678efe5f53b7696b6298dffa395200d_unpacked
-
Size
4KB
-
MD5
bb37c4e4dde9c6f4c9cf59e1c99cb2ec
-
SHA1
33627ca40ffdd61651ddef38f930d02cd038001a
-
SHA256
178fd705c072405be5b73edd83554a68a5833b8c9b74b920904029826e71ad38
-
SHA512
ec2260f3fb0b26fb982a066c2f78734c4926a68ded4e2fc73341bbe6d0df04e921f1660ae6d78de93a49f3397d794896974b34fdd56bf06620411561b45e53bb
-
SSDEEP
48:iPlAPw5WYUjACFaPeGqmiWkLUVU6sVZfN+Lg7MiIDYEMJou5KMJ8NlXj6C:Ig5jAO7GViWkWU1DoLePIkJpNJEzN
Malware Config
Signatures
Files
-
1abc65682dd189ecfacb7a4acd764ba1e678efe5f53b7696b6298dffa395200d_unpacked.exe windows x86
d860fad5c5321f6f494aa490eac291ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
_lwrite
WaitForSingleObject
GetTickCount
GlobalAlloc
Sleep
CreateProcessA
ReadFile
GetTempFileNameA
GetModuleFileNameA
CloseHandle
GetTempPathA
ws2_32
connect
recv
WSAStartup
htons
socket
closesocket
send
gethostbyname
shlwapi
StrStrIA
msvcrt
memcpy
memset
sprintf
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ