Static task
static1
Behavioral task
behavioral1
Sample
b34cd29ae43933ca7579b44c6d89a0c843ca616b9e58374fc5ae89779637e305.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b34cd29ae43933ca7579b44c6d89a0c843ca616b9e58374fc5ae89779637e305.exe
Resource
win10v2004-20221111-en
General
-
Target
b34cd29ae43933ca7579b44c6d89a0c843ca616b9e58374fc5ae89779637e305
-
Size
76KB
-
MD5
27d32844b59a85373915588f84c5dae1
-
SHA1
d8e3364ee9938f9ea7dfee18f97df27e49df42af
-
SHA256
b34cd29ae43933ca7579b44c6d89a0c843ca616b9e58374fc5ae89779637e305
-
SHA512
ff336f202bb2363f84a2019a494d4b81fd245de4c38390b6e273416f7375b77c5047c08d44ded023137401613299a365597a6abda77ae6458a3b97368f576e7d
-
SSDEEP
768:z63NIRc20jXFDatu3Y9xyhbkQMsuEqkPY8fiI0feIc4tw0+OWGmdH:z69r1EVzyQsJqyriI0eK8Gm
Malware Config
Signatures
Files
-
b34cd29ae43933ca7579b44c6d89a0c843ca616b9e58374fc5ae89779637e305.exe windows x86
83c270df1265db7afa025fb4f50672ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualFree
VirtualAlloc
GetSystemInfo
IsBadReadPtr
Sleep
TerminateProcess
LoadLibraryA
CreateThread
GetLastError
CreateMutexA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
GetProcAddress
VirtualProtect
CreateProcessA
GetVersion
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
CloseHandle
HeapFree
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
user32
MessageBoxA
OpenDesktopA
CreateDesktopA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
ws2_32
recv
send
htons
closesocket
setsockopt
connect
gethostbyname
inet_addr
shutdown
WSAStartup
socket
WSACleanup
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uhhwndp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE