Static task
static1
Behavioral task
behavioral1
Sample
a717e06a2b6ab6cb46ca41e0993c0dac3d3e4bee21925725ebf8af8795e32e51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a717e06a2b6ab6cb46ca41e0993c0dac3d3e4bee21925725ebf8af8795e32e51.exe
Resource
win10v2004-20220812-en
General
-
Target
a717e06a2b6ab6cb46ca41e0993c0dac3d3e4bee21925725ebf8af8795e32e51
-
Size
308KB
-
MD5
929de333d7014d39401273998bdacfe0
-
SHA1
b6b5af14dad1a6b77577a9efb6424b5a865557e7
-
SHA256
a717e06a2b6ab6cb46ca41e0993c0dac3d3e4bee21925725ebf8af8795e32e51
-
SHA512
eec727d68757634695ca230676a375eaf9e678137d94d01815d099f3a9285aca17d13cc31462f3c0f93b2f7ece0ab50ad552e76b3849a10465cf6c76824d3f64
-
SSDEEP
6144:79u2rvUkmPVfSVGJvzVt6VmsxyrfMZpOimf9IQ0y29r4iCGMqBBSpskbY4s0D:7Q2rzmVSqzVtdrfMZpOz9IQ0yGrvCpqi
Malware Config
Signatures
Files
-
a717e06a2b6ab6cb46ca41e0993c0dac3d3e4bee21925725ebf8af8795e32e51.exe windows x86
8fb5b7279cf5eb27d42fdf8af0339dec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcslen
wcstombs
atoi
wcscpy
_strupr
_beginthreadex
memcpy
calloc
_CIacos
printf
_CIpow
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
mbstowcs
_controlfp
vsprintf
exit
fopen
fwrite
fclose
strrchr
_except_handler3
free
strcmp
strcpy
malloc
memcmp
memset
strlen
_ftol
_chkesp
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
??2@YAPAXI@Z
memmove
_access
rand
strncat
__set_app_type
strcat
kernel32
Sleep
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
GetExitCodeThread
TerminateThread
CreateThread
MultiByteToWideChar
lstrlenA
SetEvent
CloseHandle
CreateEventA
WaitForSingleObject
LoadLibraryA
GetProcAddress
user32
wsprintfA
CreateWindowExA
SendMessageA
IsWindow
GetMessageA
PostThreadMessageA
ws2_32
WSAStartup
WSACleanup
setsockopt
connect
getsockname
gethostname
send
closesocket
ntohs
select
recv
socket
gethostbyname
htons
msvcp60
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
winmm
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutUnprepareHeader
waveInStart
waveInReset
waveInOpen
waveOutWrite
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInClose
Sections
.data Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ