Static task
static1
Behavioral task
behavioral1
Sample
0656aaba9ca933196f603c15b3120d3724a1f23dabb6b7a47a06ab352bfc6a0b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0656aaba9ca933196f603c15b3120d3724a1f23dabb6b7a47a06ab352bfc6a0b.exe
Resource
win10v2004-20220812-en
General
-
Target
0656aaba9ca933196f603c15b3120d3724a1f23dabb6b7a47a06ab352bfc6a0b
-
Size
10KB
-
MD5
10570494f0cc37649d4d30359c4f5f00
-
SHA1
52499ab01a6eaa93c265c7ff35758c8ce3cdf186
-
SHA256
0656aaba9ca933196f603c15b3120d3724a1f23dabb6b7a47a06ab352bfc6a0b
-
SHA512
102e6a8e6ffd2a89be791a904bf948f63729ab32f28f7b20970a4554efa9b0c06bfd2bd2703f33fdae88a7413b9bdb42379d8c104ad471fe42fa7ba9462bf9e6
-
SSDEEP
192:rtip3souPgSNhMk7unJBWA0Wzw/zHW97SkzHw:RMsjgWwJBWA0WzAYw
Malware Config
Signatures
Files
-
0656aaba9ca933196f603c15b3120d3724a1f23dabb6b7a47a06ab352bfc6a0b.exe windows x86
f4f0a9d7971340d0aef4805e0abaf1d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
_XcptFilter
_exit
_c_exit
_cexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_write
strrchr
_iob
fflush
isprint
__getmainargs
__initenv
exit
isspace
putchar
kernel32
GetModuleHandleA
Sleep
FormatMessageA
LocalFree
GetLastError
ws2_32
recv
WSAStartup
gethostname
getaddrinfo
socket
bind
connect
closesocket
send
user32
CharToOemBuffA
mswsock
s_perror
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 540B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE