Static task
static1
Behavioral task
behavioral1
Sample
75a25f3e9a7a673e1b24cbad8b8605ecbd48f83779b7c78d58513b01991ff074.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
75a25f3e9a7a673e1b24cbad8b8605ecbd48f83779b7c78d58513b01991ff074.exe
Resource
win10v2004-20221111-en
General
-
Target
75a25f3e9a7a673e1b24cbad8b8605ecbd48f83779b7c78d58513b01991ff074
-
Size
172KB
-
MD5
2b7b9db1b42dcf516f4a29503224a14c
-
SHA1
5d5158db92e46963722c282fc0aa379c971d0872
-
SHA256
75a25f3e9a7a673e1b24cbad8b8605ecbd48f83779b7c78d58513b01991ff074
-
SHA512
e25d6b854a61ebde5033d474edce285166b5dd2f4d87d0555c0c72ca69743f5a05655cdfd8e0517d581b7f76d182826518e1557dcc8a10e868b1c04755478f00
-
SSDEEP
3072:SK/ZheMKvHEk8r97cxCw9Bofmoavl2q05ICizgeL8:SWZ8fvHEk1xN7ForqsCzg28
Malware Config
Signatures
Files
-
75a25f3e9a7a673e1b24cbad8b8605ecbd48f83779b7c78d58513b01991ff074.exe windows x86
eff584bb1ce4c40514ea7f30e6b5d652
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CLSIDFromString
CoInitialize
OleInitialize
OleSetContainedObject
ws2_32
connect
accept
closesocket
bind
socket
WSAConnect
WSASocketA
WSAGetOverlappedResult
kernel32
ReadFile
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCPInfo
GetOEMCP
GetACP
SetTapePosition
VirtualProtect
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapFree
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetLastError
WriteFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
CloseHandle
SetFilePointer
RtlUnwind
InterlockedExchange
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
FlushFileBuffers
HeapSize
SetStdHandle
CreateFileA
MultiByteToWideChar
GetSystemInfo
LoadLibraryA
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE