Static task
static1
Behavioral task
behavioral1
Sample
65874fea5e8dc2b0991a8b734a54934972edde234f4f452484d9a098a5a52844.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65874fea5e8dc2b0991a8b734a54934972edde234f4f452484d9a098a5a52844.exe
Resource
win10v2004-20220812-en
General
-
Target
65874fea5e8dc2b0991a8b734a54934972edde234f4f452484d9a098a5a52844
-
Size
97KB
-
MD5
0fd82f14d955dfba0d04d14e6e705c40
-
SHA1
7c07158f9ea027857fb82b48dbab577771f621d2
-
SHA256
65874fea5e8dc2b0991a8b734a54934972edde234f4f452484d9a098a5a52844
-
SHA512
3ac748623647f8a7f487dac3a837eb22dcc41966eca71d394021e9be8a3c0c9d0f040f137ea27e846931728d90fa8301cb3c96b99681a9f3bb29e9549c46b313
-
SSDEEP
3072:LL3GIq7FJR546tyTLmno/u/U9FSzFsFzn:LTMFHK69o/ucjSzFsFL
Malware Config
Signatures
Files
-
65874fea5e8dc2b0991a8b734a54934972edde234f4f452484d9a098a5a52844.exe windows x86
6971e061ae91aec491774c46ae34449c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
CopyFileW
CreateDirectoryW
CreateEventW
OpenEventW
GetLastError
ResetEvent
FreeLibrary
GetProcAddress
GetSystemDirectoryW
GetTickCount
MultiByteToWideChar
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
LoadLibraryW
CloseHandle
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
user32
wsprintfW
advapi32
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegDeleteKeyW
shell32
ShellExecuteExW
SHGetFolderPathW
ole32
CoTaskMemFree
msvcp71
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?_Nomemory@std@@YAXXZ
ws2_32
WSAEnumNetworkEvents
send
WSAWaitForMultipleEvents
recv
socket
closesocket
WSAEventSelect
htons
WSCEnumProtocols
gethostbyname
WSCInstallProvider
WSCWriteProviderOrder
WSCGetProviderPath
WSCDeinstallProvider
WSACleanup
WSAStartup
WSAEnumNameSpaceProvidersW
WSAGetLastError
connect
ioctlsocket
shlwapi
PathCombineW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
msvcr71
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
__p___winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_except_handler3
__security_error_handler
_callnewh
malloc
memset
wcslen
wcsstr
wcscat
wcscpy
wcsrchr
_wcsupr
??_V@YAXPAX@Z
__CxxFrameHandler
swprintf
_wcsicmp
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE