Static task
static1
Behavioral task
behavioral1
Sample
d63e86742a4810167281eee0fcb03d9bcb24934f46724eafe60b004b1b3ee341.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d63e86742a4810167281eee0fcb03d9bcb24934f46724eafe60b004b1b3ee341.exe
Resource
win10v2004-20220812-en
General
-
Target
d63e86742a4810167281eee0fcb03d9bcb24934f46724eafe60b004b1b3ee341
-
Size
710KB
-
MD5
03d00d7f87466556248ae32ecaed0d78
-
SHA1
0b054aee678ceaff0d3115e8eeb305a1d4c36948
-
SHA256
d63e86742a4810167281eee0fcb03d9bcb24934f46724eafe60b004b1b3ee341
-
SHA512
65ba0ff0a57520e640022c5dd30ef89d7ba555d923d98705627c44270f0c8b21b9b1f2a78a87fc300f4a3b8141f514982e3c6363ad198cade2b327a3ccd3f36e
-
SSDEEP
6144:7Rti5pb8iZTy21pFG+hgmArb35Ry+NQ5q/euF68bPT6UUsYPpxpAYxsZhOuH8YAS:7RM558CppIcAHC+b/fUDsYPBjsTBia3
Malware Config
Signatures
Files
-
d63e86742a4810167281eee0fcb03d9bcb24934f46724eafe60b004b1b3ee341.exe windows x86
6f3fb5fec9cb9a9d34b70867fe5be275
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohl
WSASocketW
select
WSAEnumNetworkEvents
WSAAddressToStringW
WSAEnumProtocolsW
WSASetServiceW
WSARecvFrom
shell32
Shell_NotifyIconA
Shell_NotifyIconW
DragFinish
SHFileOperationW
kernel32
GetConsoleMode
GetCommModemStatus
LocalSize
GetNumberFormatW
EnumTimeFormatsW
GetHandleInformation
ReleaseSemaphore
GetCPInfo
FindNextChangeNotification
ExitProcess
FillConsoleOutputCharacterA
VirtualQueryEx
LocalFileTimeToFileTime
GetCommandLineW
EnumCalendarInfoW
WriteFile
SetMailslotInfo
ReadDirectoryChangesW
_lread
GetUserDefaultLangID
LocalLock
LeaveCriticalSection
GetTempPathW
PeekNamedPipe
GetCommState
GenerateConsoleCtrlEvent
EnumResourceNamesW
RemoveDirectoryA
SetVolumeLabelA
SetConsoleActiveScreenBuffer
GlobalFindAtomW
IsBadStringPtrA
CreateMutexW
ReadConsoleA
ClearCommBreak
lstrcmpiA
PrepareTape
FlushConsoleInputBuffer
GetDiskFreeSpaceW
ScrollConsoleScreenBufferA
GetTapeStatus
lstrcmpA
GetOverlappedResult
SetFileTime
GetCurrentProcess
SetConsoleWindowInfo
OutputDebugStringA
ole32
CoTaskMemRealloc
CoImpersonateClient
comctl32
ImageList_GetIcon
ImageList_GetIconSize
ImageList_Add
user32
GetScrollBarInfo
DestroyAcceleratorTable
DispatchMessageW
EnableMenuItem
CharLowerW
DrawAnimatedRects
DrawEdge
GetClassInfoA
SystemParametersInfoW
WinHelpA
GetDC
DrawTextExW
OpenDesktopW
SetKeyboardState
MonitorFromWindow
CreateMenu
LoadImageA
GetUserObjectSecurity
Sections
.text Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 379KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ