Static task
static1
Behavioral task
behavioral1
Sample
1ee0acabeafdd90b6599d9714053200324cb2311716a45d8551e97987b14401b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1ee0acabeafdd90b6599d9714053200324cb2311716a45d8551e97987b14401b.exe
Resource
win10v2004-20221111-en
General
-
Target
1ee0acabeafdd90b6599d9714053200324cb2311716a45d8551e97987b14401b
-
Size
40KB
-
MD5
bffae5525b2b2515ac95296e23c009fb
-
SHA1
8ddd5a881e6391452ea35d87acc8bdb2dd38004f
-
SHA256
1ee0acabeafdd90b6599d9714053200324cb2311716a45d8551e97987b14401b
-
SHA512
e3778dae0df6c476b3f1f96302181f890be07ec3b8a2554c890931b35e56bad8ed0434ef15862bc5ab78e398639805c7abf4767045489e631400ae60252b65b2
-
SSDEEP
384:xLmw3mUCnmdTYoSNMV1wzwWojeSSyhmlK6gY9Omlu+oGsw90HKafJohj:1mw3KmFYo7V/WZSSBgKXu+oGsw9eoh
Malware Config
Signatures
Files
-
1ee0acabeafdd90b6599d9714053200324cb2311716a45d8551e97987b14401b.exe windows x86
74fa3350782cadc1062f616d03b56c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LocalFree
FormatMessageA
Sleep
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
SetFilePointer
RtlUnwind
HeapFree
VirtualFree
HeapCreate
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
WriteFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
CloseHandle
ws2_32
recv
socket
ioctlsocket
connect
WSAGetLastError
select
__WSAFDIsSet
setsockopt
gethostbyname
send
closesocket
htons
inet_addr
WSAStartup
WSACleanup
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE