Static task
static1
Behavioral task
behavioral1
Sample
f11363a9259f61c29515b923d07b73f50a2bd36377e50b2ad2de2c02463b664d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f11363a9259f61c29515b923d07b73f50a2bd36377e50b2ad2de2c02463b664d.exe
Resource
win10v2004-20220812-en
General
-
Target
f11363a9259f61c29515b923d07b73f50a2bd36377e50b2ad2de2c02463b664d
-
Size
1.2MB
-
MD5
2018e395b494d67da8950df0dec28820
-
SHA1
5560493d8d7c0525a8ea2abb84a40dcc948a3daf
-
SHA256
f11363a9259f61c29515b923d07b73f50a2bd36377e50b2ad2de2c02463b664d
-
SHA512
9404759efb22659f0b01246544c903e7afed2a1e4fd6413fe37cdd1a6613a5d36cb2ba55120705209265745d929087296c08383ffea26ecca49cbebfcb6f35f6
-
SSDEEP
6144:YR/gTI7wkDyLPsGG6g6RamW6xViwI7zcuJhoAuwd+57a5YCr4zEcbkLKVEK:QckDyLkX6gIn8zNGdraYCVcgLKF
Malware Config
Signatures
Files
-
f11363a9259f61c29515b923d07b73f50a2bd36377e50b2ad2de2c02463b664d.exe windows x86
78478b661d1b9a2d92a5933f80c71798
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetAddConnection2A
ws2_32
WSAStartup
setsockopt
bind
listen
accept
WSACleanup
htons
recv
send
select
__WSAFDIsSet
socket
ioctlsocket
connect
closesocket
inet_addr
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
CreateFileMappingA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
ExitThread
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
MultiByteToWideChar
ReadFile
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
WaitForSingleObject
GetLastError
CreateEventA
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
CreateThread
GetFileSize
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
SetFileTime
GetFileTime
CreateProcessA
ExpandEnvironmentStringsA
SetFileAttributesA
GetTempPathA
GetVersionExA
CopyFileA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
GetCurrentProcess
CreatePipe
GlobalMemoryStatus
GetSystemDirectoryA
GetLocalTime
ExitProcess
WideCharToMultiByte
GetComputerNameA
DeleteFileA
GetCurrentProcessId
CreateMutexA
TerminateThread
MoveFileA
TerminateProcess
lstrcmpiA
GetLocaleInfoA
GetLogicalDrives
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
RaiseException
HeapSize
LCMapStringA
LCMapStringW
Sections
����t Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����c Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE