Static task
static1
Behavioral task
behavioral1
Sample
178d82589d9f90b2b6037639b239dd59681820c40c5a817fed525534ece40a01.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
178d82589d9f90b2b6037639b239dd59681820c40c5a817fed525534ece40a01.exe
Resource
win10v2004-20221111-en
General
-
Target
178d82589d9f90b2b6037639b239dd59681820c40c5a817fed525534ece40a01
-
Size
48KB
-
MD5
f7cebb6c2d5e50fa348dc30837845e9c
-
SHA1
5f2549c35a4bb5df72ce5b2f2d391d9303d1c0df
-
SHA256
178d82589d9f90b2b6037639b239dd59681820c40c5a817fed525534ece40a01
-
SHA512
9e986aa6c5c0719faad466d7b7d4211097f2bb737eb54d33c37b747a149ef1c4b098bd7b149390f1d56360ee2404f77bbe8a4232d5200eb574404e9013860d90
-
SSDEEP
768:45+sdl+I2cCx8PqdrLmH1vYxG3BZTiVMystvCR5wA:MgI2ccd3k1QCZ26ystvc5
Malware Config
Signatures
Files
-
178d82589d9f90b2b6037639b239dd59681820c40c5a817fed525534ece40a01.exe windows x86
218ee612f1a76a19e2ff866ba2fde50b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
CloseHandle
ReleaseMutex
OpenMutexA
GetTempPathA
lstrlenA
GetSystemDefaultUILanguage
WaitForSingleObject
GetLastError
CreateMutexA
GetModuleHandleA
GetCurrentThreadId
GetWindowsDirectoryA
GetStartupInfoA
TerminateProcess
OutputDebugStringA
ExitThread
GetSystemDirectoryA
GetTickCount
GetVersionExA
lstrcpyA
GlobalMemoryStatusEx
GlobalAlloc
GlobalFree
LoadLibraryA
GetProcAddress
Sleep
CreateThread
user32
GetDesktopWindow
GetMessageA
PostThreadMessageA
GetInputState
wsprintfA
advapi32
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
StartServiceCtrlDispatcherA
ws2_32
recv
send
__WSAFDIsSet
WSAIoctl
htons
connect
closesocket
select
WSAStartup
htonl
inet_ntoa
setsockopt
gethostbyname
inet_addr
sendto
WSASocketA
WSACleanup
socket
iphlpapi
GetIfTable
shlwapi
SHDeleteKeyA
msvcrt
_controlfp
_strrev
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
realloc
malloc
__CxxFrameHandler
_CxxThrowException
atoi
strncpy
strcspn
strstr
sprintf
free
??2@YAPAXI@Z
exit
strncmp
_except_handler3
??3@YAXPAX@Z
rand
srand
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ