Static task
static1
Behavioral task
behavioral1
Sample
20bcbc9c35c0a973c1cba229b2633062c6f866b7a2bb09a0dbccd1447c177b8c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
20bcbc9c35c0a973c1cba229b2633062c6f866b7a2bb09a0dbccd1447c177b8c.exe
Resource
win10v2004-20221111-en
General
-
Target
20bcbc9c35c0a973c1cba229b2633062c6f866b7a2bb09a0dbccd1447c177b8c
-
Size
840KB
-
MD5
d9e87296967d341964fad8d794707838
-
SHA1
a4bae9c309889fe18e312d17c888164f3fdf4276
-
SHA256
20bcbc9c35c0a973c1cba229b2633062c6f866b7a2bb09a0dbccd1447c177b8c
-
SHA512
9e664e1cb6b05be9792cfae71ea5d381e84948ee3c39363801454d11892c3d713434f9bb263e6c5be9e2b63447199a768504fb4e7ab72c61ce668c0ed5a612ff
-
SSDEEP
24576:N5/1B7hYae91jZiiTHUwWdKklXHJ0J8U5T:vAtiW0dT8fT
Malware Config
Signatures
Files
-
20bcbc9c35c0a973c1cba229b2633062c6f866b7a2bb09a0dbccd1447c177b8c.exe windows x86
c9c465934b53696890a6980fc0c099d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
inet_addr
gethostbyname
setsockopt
bind
listen
htons
ntohl
accept
WSACloseEvent
send
htonl
socket
connect
closesocket
WSACreateEvent
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACleanup
WSAEventSelect
WSARecv
WSASend
WSAStartup
ioctlsocket
ntohs
gethostname
WSAGetLastError
WSASetLastError
kernel32
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
SetStdHandle
VirtualAlloc
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
UnmapViewOfFile
GetTickCount
MapViewOfFile
CloseHandle
GetLastError
CreateMutexA
SetCurrentDirectoryA
TerminateProcess
Sleep
CreateProcessA
CreateThread
CreateFileMappingA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentThreadId
CreateDirectoryA
GetModuleFileNameA
SetEnvironmentVariableA
InterlockedDecrement
WaitForSingleObject
InterlockedIncrement
InterlockedExchange
PulseEvent
SetLastError
FormatMessageA
GetVersion
GetVersionExW
DeleteFileW
MoveFileExW
MoveFileW
MultiByteToWideChar
GetFileAttributesW
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
WriteFile
GetDiskFreeSpaceW
GetFileInformationByHandle
FlushFileBuffers
WideCharToMultiByte
GetTempPathW
GetEnvironmentVariableW
OpenFileMappingW
CreateFileMappingW
GetSystemTime
SetEvent
CreateMutexW
ReleaseMutex
SignalObjectAndWait
ResetEvent
FindClose
FindNextFileW
FindFirstFileW
GetSystemInfo
LockFileEx
LockFile
QueryPerformanceCounter
VirtualFree
HeapCreate
CreateEventW
UnlockFile
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetCurrentProcessId
GetFullPathNameA
GetFileType
CreateFileA
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetCurrentDirectoryA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
HeapDestroy
user32
GetMessageA
GetKeyNameTextA
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
Sections
.text Size: 740KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ