Static task
static1
Behavioral task
behavioral1
Sample
710b0e9b8c122b4fda9f1c5c74887cfab73d2b17302569c06db1c9f19511079b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
710b0e9b8c122b4fda9f1c5c74887cfab73d2b17302569c06db1c9f19511079b.exe
Resource
win10v2004-20220901-en
General
-
Target
710b0e9b8c122b4fda9f1c5c74887cfab73d2b17302569c06db1c9f19511079b
-
Size
36KB
-
MD5
0e8c5716be311c56ef64a8fe25486580
-
SHA1
67146639a5c538b6eeeaf91d66f95d8efa7a8099
-
SHA256
710b0e9b8c122b4fda9f1c5c74887cfab73d2b17302569c06db1c9f19511079b
-
SHA512
8ffe613ad9a26ddd575859f63a733b5c232330b6df16e9c14955dce7698e6036fafc93aa8b7acc035e597df5cc35396cf06863f9aabf35f7753fc1e493dc40a8
-
SSDEEP
768:XNsu2PL7m0UjivTliN2BnKf5vdzHZoO9R:XN92PRvTljBneNo+R
Malware Config
Signatures
Files
-
710b0e9b8c122b4fda9f1c5c74887cfab73d2b17302569c06db1c9f19511079b.exe windows x86
5ab35dd34a0a61bc585c5e5d8563c31d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
InitializeCriticalSection
GetStdHandle
FreeEnvironmentStringsA
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
HeapAlloc
UnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
Sleep
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetCPInfo
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
LCMapStringW
SetStdHandle
user32
wsprintfA
ws2_32
socket
WSAStartup
htons
inet_addr
htonl
WSACleanup
WSAGetLastError
bind
closesocket
connect
send
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE