Static task
static1
Behavioral task
behavioral1
Sample
792b9bd74810a8b952f97d772cb68242400af97a87dcf20335dd9fc00a830ecf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
792b9bd74810a8b952f97d772cb68242400af97a87dcf20335dd9fc00a830ecf.exe
Resource
win10v2004-20220901-en
General
-
Target
792b9bd74810a8b952f97d772cb68242400af97a87dcf20335dd9fc00a830ecf
-
Size
28KB
-
MD5
3d6030f572aadbdf62da2d721c96c077
-
SHA1
4f5fce2ba3eb10dd4c6419cec50f1bbd3a6069ca
-
SHA256
792b9bd74810a8b952f97d772cb68242400af97a87dcf20335dd9fc00a830ecf
-
SHA512
f774e927669497cd694a92dcee09100d0ad0d9efc4f9ce2363f7a498449de799a823ed812ca43dceb3c2352544ef50400d9165f6bf056187c1474d1eb4356bbb
-
SSDEEP
384:w+jO39tjAoCP1f1GWawP1ecoO9Obud+3ae3DFeHqsY1fZI:w+jOttjAosttNJUlt1fZI
Malware Config
Signatures
Files
-
792b9bd74810a8b952f97d772cb68242400af97a87dcf20335dd9fc00a830ecf.exe windows x86
eb58ab5a3c8a863c4d8c4b2e9f905cdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
WaitForSingleObject
CloseHandle
CreateThread
GetSystemInfo
Sleep
GetCurrentProcessId
CreateMutexA
GetTickCount
GetModuleHandleA
GetStartupInfoA
advapi32
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ws2_32
gethostbyname
select
__WSAFDIsSet
recv
inet_addr
socket
connect
send
gethostname
inet_ntoa
WSAStartup
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
WSAIoctl
iphlpapi
GetIfTable
msvcrt
fprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
??2@YAPAXI@Z
strcpy
_local_unwind2
_except_handler3
sprintf
rand
memset
printf
memcpy
_iob
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ