Static task
static1
Behavioral task
behavioral1
Sample
9265b51a61734eb0ae5de4a3d7d5ca9646dff68c284e5bdd1867cee8af70d475.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9265b51a61734eb0ae5de4a3d7d5ca9646dff68c284e5bdd1867cee8af70d475.exe
Resource
win10v2004-20220812-en
General
-
Target
9265b51a61734eb0ae5de4a3d7d5ca9646dff68c284e5bdd1867cee8af70d475
-
Size
29KB
-
MD5
99683874a49f3cc325410d3764baee16
-
SHA1
758f8a2eb47ab636993142fbe8bbcd279478a3cf
-
SHA256
9265b51a61734eb0ae5de4a3d7d5ca9646dff68c284e5bdd1867cee8af70d475
-
SHA512
da57a7b8326766971640ffe39f27ca742316cce6cd08dacea03c1657ae1ca9caa60c1cf3c981b1f760d2f77da937576f3270804eaa9eaa974f42eecff2c772ce
-
SSDEEP
768:m0ybb9EWn4TopvZQyHpoITKesrI7fKg3:mvbOWn4To1ZQioiKhr0Kg3
Malware Config
Signatures
Files
-
9265b51a61734eb0ae5de4a3d7d5ca9646dff68c284e5bdd1867cee8af70d475.exe windows x86
21c93b2b2f4e28ec4dcee9e7a15c94ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
LocalLock
FormatMessageA
GetLastError
Sleep
ReleaseMutex
CreateMutexA
OpenMutexA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
user32
MessageBoxA
ws2_32
socket
bind
listen
htons
send
shutdown
closesocket
WSAGetLastError
WSAStartup
accept
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ