Static task
static1
Behavioral task
behavioral1
Sample
fc7342e1f2a72a284c87ddf91c14f82db0b98477a236b548ce76cf1ae8069217.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fc7342e1f2a72a284c87ddf91c14f82db0b98477a236b548ce76cf1ae8069217.exe
Resource
win10v2004-20220812-en
General
-
Target
fc7342e1f2a72a284c87ddf91c14f82db0b98477a236b548ce76cf1ae8069217
-
Size
212KB
-
MD5
05051e8422e4a4d3de286b5acf5056f0
-
SHA1
fe1850941ab5c8e10a664497bfeac0bb9fe088bc
-
SHA256
fc7342e1f2a72a284c87ddf91c14f82db0b98477a236b548ce76cf1ae8069217
-
SHA512
cf63d6505fa900e73a36595250cd454d167cc515dd4db5085292a125c3683f6147f008cfbfed2b700e27887aa02a14ffb783a2f9c14b57aa89a56bbf4724b296
-
SSDEEP
6144:9c6ySN+6yVKmfL2czLL3RphvTDI42hF9/6KagEMG:rySN+6yV02LFvTE42h3G
Malware Config
Signatures
Files
-
fc7342e1f2a72a284c87ddf91c14f82db0b98477a236b548ce76cf1ae8069217.exe windows x86
06dfffb48577ae3d284f3ca2cfac412c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
ws2_32
WSAStartup
setsockopt
ioctlsocket
htons
bind
listen
WSACleanup
__WSAFDIsSet
accept
shutdown
recv
socket
connect
send
closesocket
inet_addr
gethostbyname
select
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
Sleep
MultiByteToWideChar
ReadFile
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
WaitForSingleObject
GetLastError
CreateEventA
CopyFileA
WideCharToMultiByte
GetTickCount
DeleteFileA
CreateProcessA
OpenProcess
GetCurrentProcessId
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
ExitProcess
CreateMutexA
MoveFileA
GetTempPathA
CreateThread
ExitThread
SetFilePointer
GetFileSize
GetLocalTime
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
ExpandEnvironmentStringsA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
GetCurrentProcess
CreatePipe
GetComputerNameA
GetTimeFormatA
GetDateFormatA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
GetLogicalDrives
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
LoadLibraryA
lstrcpynA
lstrcmpA
lstrcpyA
lstrlenA
GetLocaleInfoA
GetVersionExA
GlobalAlloc
GlobalMemoryStatus
TerminateThread
HeapAlloc
HeapFree
RtlUnwind
GetTimeZoneInformation
GetSystemTime
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapSize
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ