Static task
static1
Behavioral task
behavioral1
Sample
4cfd370dfd1fc77ba9dca1f5aa8341a21cef8d9b2cef55170d503d528a672897.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4cfd370dfd1fc77ba9dca1f5aa8341a21cef8d9b2cef55170d503d528a672897.exe
Resource
win10v2004-20220901-en
General
-
Target
4cfd370dfd1fc77ba9dca1f5aa8341a21cef8d9b2cef55170d503d528a672897
-
Size
272KB
-
MD5
4364846633ccf5b1c460f773bc9d13e1
-
SHA1
af9e5e672e40bd08e89dbad17bfe179113d68986
-
SHA256
4cfd370dfd1fc77ba9dca1f5aa8341a21cef8d9b2cef55170d503d528a672897
-
SHA512
d0320b29cf2c079d1a28c38ff30d78794b844e61b66e986400312b34197f2511e749bfd307a11f482d15e31f84d04426133f42ed4eb27e95a612e8d3b974b172
-
SSDEEP
6144:7vKXUs67qA6GSmOkM1i8pUNb6elqnPKwjfdFv2j9jepf43V2N5y:mXUs67qA6GSmOkUrSNb6elqtHw9jelzk
Malware Config
Signatures
Files
-
4cfd370dfd1fc77ba9dca1f5aa8341a21cef8d9b2cef55170d503d528a672897.exe windows x86
1eedbf5c5ef2eab9dfd4734b6775d68e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
ws2_32
WSAStartup
setsockopt
ioctlsocket
htons
bind
listen
WSACleanup
__WSAFDIsSet
accept
shutdown
recv
socket
connect
send
closesocket
inet_addr
gethostbyname
select
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
GetLogicalDrives
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
IsBadCodePtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
Sleep
WriteFile
WaitForSingleObject
GetLastError
CreateEventA
ReadFile
CloseHandle
CreateFileA
CopyFileA
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
DeleteFileA
CreateProcessA
OpenProcess
GetCurrentProcessId
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
ExitProcess
CreateMutexA
MoveFileA
GetTempPathA
CreateThread
ExitThread
SetFilePointer
GetFileSize
GetLocalTime
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
ExpandEnvironmentStringsA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
GetCurrentProcess
CreatePipe
GetComputerNameA
GetTimeFormatA
GetDateFormatA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
TerminateProcess
TransactNamedPipe
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
GetProcAddress
lstrcpynA
lstrcmpA
lstrcpyA
lstrlenA
GetLocaleInfoA
GetVersionExA
GlobalMemoryStatus
TerminateThread
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetTimeZoneInformation
GetSystemTime
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
OutputDebugStringA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
InitializeCriticalSection
FatalAppExitA
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ