Static task
static1
Behavioral task
behavioral1
Sample
4ff8c22e87cbee87f391ac900ba1fc7d3f14ecaded6f0745916b4eadfe582b97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ff8c22e87cbee87f391ac900ba1fc7d3f14ecaded6f0745916b4eadfe582b97.exe
Resource
win10v2004-20220812-en
General
-
Target
4ff8c22e87cbee87f391ac900ba1fc7d3f14ecaded6f0745916b4eadfe582b97
-
Size
386KB
-
MD5
a2d92b1e14f37c242945f4c88e6b67c5
-
SHA1
e585d753a9109f7b8ed0291258a73bc6ed9a0dde
-
SHA256
4ff8c22e87cbee87f391ac900ba1fc7d3f14ecaded6f0745916b4eadfe582b97
-
SHA512
1fa6653ebab3e1bc9cb241e6660461ccac6899f586ac1cc08b89954bbb56e8d37a3044007412075019a5285a41ca79cab94b8e34838350db27db47d57848d804
-
SSDEEP
6144:av/eO3riCZNf/sQesY6PP7VgIwUhPE+lq+d/51N2d8CpmRqODscZV+qW:wNdHfGr6n7mgDVd/51NjrRqxcZ
Malware Config
Signatures
Files
-
4ff8c22e87cbee87f391ac900ba1fc7d3f14ecaded6f0745916b4eadfe582b97.exe windows x86
0a611e04e55228d8f5f06e16bfb3ef33
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
traffic
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcSetFlowA
TcSetFlowA
kernel32
VirtualAllocEx
GetSystemDirectoryA
TlsFree
GetDiskFreeSpaceW
CreateFileA
GetThreadTimes
ReadFile
GetACP
TlsFree
TlsFree
ReplaceFileA
IsProcessInJob
GlobalFree
GetComputerNameA
CreatePipe
DuplicateHandle
GetConsoleAliasA
GlobalFree
IsValidCodePage
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
SetComputerNameA
SetComputerNameW
LockFileEx
ExitProcess
AllocConsole
GetThreadTimes
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
Sections
.text Size: 512B - Virtual size: 457B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE