Static task
static1
Behavioral task
behavioral1
Sample
a1531cec462ee4451fa0f1d6548bcfe20bd42494c0971adc529dd83daf77a712.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1531cec462ee4451fa0f1d6548bcfe20bd42494c0971adc529dd83daf77a712.exe
Resource
win10v2004-20220812-en
General
-
Target
a1531cec462ee4451fa0f1d6548bcfe20bd42494c0971adc529dd83daf77a712
-
Size
16KB
-
MD5
8325ce0e69dbaf2b42c462638837db00
-
SHA1
ce9d87738c4c1fe7e1d7faa2282d7fd92ff50a13
-
SHA256
a1531cec462ee4451fa0f1d6548bcfe20bd42494c0971adc529dd83daf77a712
-
SHA512
4bcfd59ad7685af191f76eebd8c2fb98f282f3d43e4034ca51c9c926dc7514e8e32d39f8174fa31a1ceca6dad4e969e6205d8142287f698beed220c8696b3ba9
-
SSDEEP
24:etGSWuFVI26I2kEv5brBOYve6iUxcBaGSuStBqpx5WWdbIr0BJHD5bDSg9OCt:6Wu425MeznSuStBOdbcA5tb
Malware Config
Signatures
Files
-
a1531cec462ee4451fa0f1d6548bcfe20bd42494c0971adc529dd83daf77a712.exe windows x86
57cd30a007714364ed3c16b585028089
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateThread
ExitProcess
ws2_32
gethostbyname
closesocket
connect
htons
inet_addr
socket
send
recv
WSAStartup
Sections
.text Size: 4KB - Virtual size: 639B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE