Static task
static1
Behavioral task
behavioral1
Sample
ba9b921638eba41910574ae9390262e0984d5af8221539ba6eaf04a8155f0813.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba9b921638eba41910574ae9390262e0984d5af8221539ba6eaf04a8155f0813.exe
Resource
win10v2004-20220901-en
General
-
Target
ba9b921638eba41910574ae9390262e0984d5af8221539ba6eaf04a8155f0813
-
Size
51KB
-
MD5
20b0f6ffc0c8687b5999d93038457be1
-
SHA1
7e6a31cf57b0e8d57b44fb29bdf657fa74b99d8b
-
SHA256
ba9b921638eba41910574ae9390262e0984d5af8221539ba6eaf04a8155f0813
-
SHA512
6ea361cf26eba2067a3f4837f279be951b5fbd870fc93041ccd2b1f37272b9c73a5ee5128d2998133bd943dba92284cf51f1798f840aa2c0c89245a9e9ac7cf0
-
SSDEEP
768:16WGewfJG/FajP7bvUZRwsuCXP/P8HF5uh6M0oiBQPk9WEDxXn31VmniF:4HeTtrACX0HF5if0oyQP27F
Malware Config
Signatures
Files
-
ba9b921638eba41910574ae9390262e0984d5af8221539ba6eaf04a8155f0813.exe windows x86
44d2692c65cbefa62859e7ce11b07911
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ioctlsocket
connect
WSAStartup
inet_addr
select
WSAGetLastError
htons
recv
socket
closesocket
gethostbyname
send
kernel32
FreeEnvironmentStringsW
CreateFileW
IsProcessorFeaturePresent
GetStringTypeW
LCMapStringW
SetFilePointer
MultiByteToWideChar
WriteConsoleW
CloseHandle
AllocConsole
GetTickCount
Sleep
GetStdHandle
LocalAlloc
LocalFree
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLastError
GetFileType
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
DeleteCriticalSection
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
EncodePointer
WriteFile
GetModuleFileNameW
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ