Static task
static1
Behavioral task
behavioral1
Sample
0d9323c5e5d4154382389c528122116a79e8a77b4406965bccc377e881284142.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0d9323c5e5d4154382389c528122116a79e8a77b4406965bccc377e881284142.exe
Resource
win10v2004-20220812-en
General
-
Target
0d9323c5e5d4154382389c528122116a79e8a77b4406965bccc377e881284142
-
Size
164KB
-
MD5
a2a93122f8471d8f5971e659ebdb0650
-
SHA1
acacc8fe7f4efd3bff8efb7d3249ce0980ee8f0a
-
SHA256
0d9323c5e5d4154382389c528122116a79e8a77b4406965bccc377e881284142
-
SHA512
6e18479f9fbe6d9f23025bfc6c3ab931de34293a699723d04d474ff3f50bab42fc66c8dc1ccabd47cb205b6d53dfc238c49f7f5368ba99d6d8804781391f6f6d
-
SSDEEP
3072:v94dfbSC4fRoAlUSvI6Ut4jSDADeak7dJHB/Af:vKdfbSCw2AlfvjjSsQLH5Af
Malware Config
Signatures
Files
-
0d9323c5e5d4154382389c528122116a79e8a77b4406965bccc377e881284142.exe windows x86
2bfe114124f63ab7d74f5ecca95b7654
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSAStartup
gethostname
gethostbyname
WSACleanup
kernel32
IsValidCodePage
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
GetStdHandle
GetLastError
CreateFileA
CloseHandle
ReadFile
WriteFile
SetFilePointerEx
SetEndOfFile
GetFileSize
Sleep
SetConsoleCursorInfo
GetConsoleCursorInfo
FindClose
FindNextFileA
FindFirstFileA
WriteConsoleA
FlushFileBuffers
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
HeapFree
GetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
GetConsoleMode
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
SetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleFileNameA
GetFullPathNameA
GetCurrentDirectoryA
SetStdHandle
GetFileType
SetHandleCount
GetStartupInfoA
WideCharToMultiByte
GetTimeZoneInformation
LoadLibraryA
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
HeapSize
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ