Static task
static1
Behavioral task
behavioral1
Sample
443231d44525e58fd1551adb4776677f8cdbd8cf3897aae1d33b9e529f0b969a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
443231d44525e58fd1551adb4776677f8cdbd8cf3897aae1d33b9e529f0b969a.exe
Resource
win10v2004-20220812-en
General
-
Target
443231d44525e58fd1551adb4776677f8cdbd8cf3897aae1d33b9e529f0b969a
-
Size
68KB
-
MD5
9214226607dca173f63fc76d03081dc0
-
SHA1
e6e6352d8a955e096427ea05133a52545a21021a
-
SHA256
443231d44525e58fd1551adb4776677f8cdbd8cf3897aae1d33b9e529f0b969a
-
SHA512
2a47e0923d922d021686662ecbc5b3b299d5f8d1b437da1538c4ed63ba1700635c0c74a6e54d61c986e52058d1127d29fa84979429c7f9dcf47da706ecbf2c26
-
SSDEEP
768:ad1VSIW6QTND9pe7CBzSm83nh8yS6NhtGj9uCLYDRv8zIfpUepYHW5ca2otI/wWt:YgFjTeGp6DptG0QwjRUn251zi/wWukNR
Malware Config
Signatures
Files
-
443231d44525e58fd1551adb4776677f8cdbd8cf3897aae1d33b9e529f0b969a.exe windows x86
8daad8374e811849e170343cf77931d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleHandleA
dldiap
??0DlDIAPVarList@@QAE@PAUDlDIAPVar@@@Z
?WaitForDate@DlDIAPClient@@QAEHPAVDlDIAPVarList@@K@Z
?SendRequestASYN@DlDIAPClient@@QAEHVCString@@0PAVDlDIAPVarList@@E@Z
??0DlDIAPResponseVarList@@QAE@PAUDlDIAPResponseVar@@@Z
??1DlDIAPResponseVarList@@QAE@XZ
??ADlDIAPResponseVarList@@QAEAAUDlDIAPResponseVar@@H@Z
??ADlDIAPVarList@@QAEAAUDlDIAPVar@@H@Z
??4DlDIAPVarList@@QAEAAV0@ABV0@@Z
??1DlDIAPVarList@@QAE@XZ
??0DlDIAPClient@@QAE@XZ
??0DlDIAPVarList@@QAE@XZ
mfc42
ord815
ord398
ord700
ord2393
ord561
ord1997
ord6407
ord924
ord6779
ord3439
ord532
ord837
ord920
ord860
ord913
ord2764
ord858
ord2614
ord928
ord5934
ord3810
ord537
ord823
ord800
ord798
ord1575
ord5594
ord533
ord540
ord825
ord1832
ord5651
ord3126
ord350
ord3663
msvcrt
_exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_XcptFilter
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
_ftol
__CxxFrameHandler
atoi
_adjust_fdiv
__p__commode
msvcp60
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE