Static task
static1
Behavioral task
behavioral1
Sample
00d38f22f0c77b6f13ff70d7c4418a823084f4e3ddb72e63a3475302448db05b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00d38f22f0c77b6f13ff70d7c4418a823084f4e3ddb72e63a3475302448db05b.exe
Resource
win10v2004-20220812-en
General
-
Target
00d38f22f0c77b6f13ff70d7c4418a823084f4e3ddb72e63a3475302448db05b
-
Size
74KB
-
MD5
2060f5e85bbc198841f4d872b897e270
-
SHA1
6471eff2da4db7848c54faed768be7061b1cac7b
-
SHA256
00d38f22f0c77b6f13ff70d7c4418a823084f4e3ddb72e63a3475302448db05b
-
SHA512
595e54eb8fe06cfe45f9f8814d422859515202ad9ede49210d264c726ea95369ccc2ca797caf88e4739229962947f642786b59a219a1e4ddc930709dceadd3d2
-
SSDEEP
1536:PSeMae/1eYOtWQyHg7Z+IokmaqiIa88r+lUMZWi:Wae/1it/l+jNaqiIah+lUMZ
Malware Config
Signatures
Files
-
00d38f22f0c77b6f13ff70d7c4418a823084f4e3ddb72e63a3475302448db05b.exe windows x86
139ba377d65edf8be84129b02e7550b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSASetLastError
WSAStringToAddressA
accept
WSAEnumProtocolsW
WSCGetProviderPath
WSALookupServiceNextA
WSCInstallProvider
WSADuplicateSocketW
send
setsockopt
WSCEnumProtocols
WSACloseEvent
WSARecvDisconnect
WSAEventSelect
WSAResetEvent
WSARecvFrom
WSAAsyncGetProtoByNumber
WSASendDisconnect
WSAGetQOSByName
recvfrom
select
WSASocketA
htonl
WSALookupServiceEnd
WSASetServiceW
WSAStartup
WSAEnumNetworkEvents
WSAAsyncGetHostByAddr
getservbyport
getsockname
WSACancelAsyncRequest
htons
getprotobynumber
WSAAsyncGetHostByName
shutdown
getsockopt
connect
inet_ntoa
advapi32
AccessCheckByTypeResultList
user32
SendMessageW
DialogBoxParamA
EndDialog
kernel32
_hread
DefineDosDeviceA
OpenEventW
SetDefaultCommConfigA
GetDefaultCommConfigA
GlobalCompact
LocalSize
GetStringTypeW
GetLocalTime
FindNextChangeNotification
GlobalMemoryStatus
GlobalUnfix
SetThreadPriorityBoost
MapViewOfFile
CreateMutexA
GetProfileStringA
Process32NextW
GetNamedPipeHandleStateA
EnumLanguageGroupLocalesA
EnumLanguageGroupLocalesW
_lcreat
GetVolumeInformationW
GetCurrentProcess
SetThreadPriority
SetCurrentDirectoryA
GetCommProperties
GetTempFileNameA
WideCharToMultiByte
ExpandEnvironmentStringsW
lstrcmpiA
IsProcessorFeaturePresent
FlushFileBuffers
FreeEnvironmentStringsW
FindAtomA
SetEnvironmentVariableW
IsDBCSLeadByte
FreeEnvironmentStringsA
GetFileInformationByHandle
GetCurrentDirectoryA
LCMapStringW
FindFirstVolumeMountPointA
GetDateFormatW
CompareFileTime
lstrcatA
CreateWaitableTimerW
GetStdHandle
CreateDirectoryExW
MoveFileA
GetProcessHeaps
SleepEx
CreateWaitableTimerA
GetSystemInfo
LocalHandle
GetComputerNameExA
OpenWaitableTimerA
GetProcessVersion
CompareStringA
EnumDateFormatsA
SetFilePointerEx
GetExitCodeProcess
GetTempPathA
ReplaceFileA
FormatMessageA
IsSystemResumeAutomatic
GetDriveTypeA
GetShortPathNameW
GetProcessAffinityMask
CreateFileMappingA
GetPriorityClass
GetPrivateProfileSectionA
SignalObjectAndWait
OpenFile
LockFile
CreateTimerQueueTimer
_hwrite
EnumResourceNamesA
GetCPInfoExA
PeekNamedPipe
SetFileAttributesW
Process32FirstW
GetCommState
DeviceIoControl
GetPrivateProfileSectionNamesA
GetProfileIntA
FreeLibrary
SetProcessWorkingSetSize
FindVolumeClose
CreateNamedPipeW
EnumDateFormatsExW
GetStringTypeA
GetStringTypeExW
FindFirstFileExA
IsBadStringPtrA
GetThreadTimes
FindFirstFileA
GetProfileStringW
FindResourceW
_lwrite
EnumTimeFormatsA
GetMailslotInfo
CreateMailslotA
GetCompressedFileSizeW
GetFileTime
ResumeThread
CreateMailslotW
GlobalFix
SetVolumeLabelW
IsValidLocale
SetVolumeMountPointW
SetTapePosition
FatalAppExitW
WritePrivateProfileStringA
CreateFileW
GetDateFormatA
ReadDirectoryChangesW
GetModuleHandleA
SetPriorityClass
CreateFileA
SuspendThread
SetLocaleInfoW
VerSetConditionMask
LoadModule
ReplaceFileW
GlobalAddAtomA
LocalCompact
DnsHostnameToComputerNameW
GetDefaultCommConfigW
TransactNamedPipe
LockResource
FindNextVolumeW
DebugActiveProcess
GetDriveTypeW
WritePrivateProfileSectionA
GetSystemPowerStatus
FatalExit
WritePrivateProfileStructA
GetComputerNameW
GetPrivateProfileStructA
ReadFileScatter
WaitForSingleObject
GetTimeFormatW
DeleteAtom
GetPrivateProfileStructW
EnumResourceLanguagesW
GetThreadPriorityBoost
GetSystemDefaultLCID
SetProcessPriorityBoost
GetLongPathNameA
EndUpdateResourceA
PrepareTape
GetUserDefaultLangID
EscapeCommFunction
SetSystemTime
CommConfigDialogA
DeleteFileA
GetShortPathNameA
FindNextVolumeMountPointW
CreateDirectoryA
CreateHardLinkW
LocalAlloc
FindClose
SetSystemPowerState
BackupSeek
GetSystemWindowsDirectoryW
GetProcAddress
GetDiskFreeSpaceA
SetDefaultCommConfigW
GetComputerNameExW
CreateJobObjectA
GetQueuedCompletionStatus
GlobalHandle
EndUpdateResourceW
GetVersionExW
InitAtomTable
FindAtomW
_lopen
MapViewOfFileEx
GetVolumeInformationA
EnumUILanguagesA
FlushInstructionCache
SetHandleCount
WriteProfileSectionA
GetPrivateProfileIntW
lstrlenA
FindNextVolumeA
GetSystemTimeAdjustment
LCMapStringA
GetSystemTime
GetNamedPipeHandleStateW
lstrcmpA
VerifyVersionInfoA
GetTimeFormatA
TlsGetValue
GetModuleFileNameW
PostQueuedCompletionStatus
OpenSemaphoreW
GlobalUnlock
SetLocalTime
GetFullPathNameA
SetProcessShutdownParameters
FindResourceA
GetNumberFormatW
UpdateResourceW
EnumUILanguagesW
IsBadCodePtr
WaitForMultipleObjects
ProcessIdToSessionId
GetVolumePathNameA
_lclose
GetFileSize
CallNamedPipeA
lstrcpynA
WaitForMultipleObjectsEx
SetThreadIdealProcessor
CancelIo
EnumCalendarInfoW
GetProfileIntW
PurgeComm
GetCurrentThreadId
GetVolumeNameForVolumeMountPointW
GetCommTimeouts
OutputDebugStringA
GetProcessPriorityBoost
CreateJobObjectW
ExpandEnvironmentStringsA
FoldStringA
TlsSetValue
EnumSystemLanguageGroupsA
EnumResourceNamesW
FindFirstFileW
EnumSystemLanguageGroupsW
GetVolumePathNameW
CancelDeviceWakeupRequest
GetUserDefaultUILanguage
_llseek
IsBadStringPtrW
QueryPerformanceCounter
UnhandledExceptionFilter
_lread
LoadResource
SetCalendarInfoA
DeleteTimerQueueEx
GetLastError
WritePrivateProfileSectionW
SetVolumeMountPointA
LocalShrink
SetErrorMode
FatalAppExitA
AssignProcessToJobObject
FileTimeToDosDateTime
FormatMessageW
CallNamedPipeW
LocalFileTimeToFileTime
WaitCommEvent
FileTimeToLocalFileTime
GetVolumeNameForVolumeMountPointA
FoldStringW
GetTickCount
MoveFileExA
GetDiskFreeSpaceExA
lstrcpyW
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ