Static task
static1
Behavioral task
behavioral1
Sample
ba20cb209db96efc896a3a4c19c41afcbf9c692023fcbea0b9ec36530a5ab110.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba20cb209db96efc896a3a4c19c41afcbf9c692023fcbea0b9ec36530a5ab110.exe
Resource
win10v2004-20220812-en
General
-
Target
ba20cb209db96efc896a3a4c19c41afcbf9c692023fcbea0b9ec36530a5ab110
-
Size
20KB
-
MD5
02d6132ffad212427c25a0c08dc5be9a
-
SHA1
c1e66f75bf018c73a4d3434e2ef66b35e0bda314
-
SHA256
ba20cb209db96efc896a3a4c19c41afcbf9c692023fcbea0b9ec36530a5ab110
-
SHA512
c16ac6a65908fb2691af3e5a26a244d55500f877e51c8239263c58cd717694f4592fe1024eeaaa0d9b3ac6dbfd009f324d443dc435152fcbc454b70cfc6caded
-
SSDEEP
192:Q9oQohOy0IHjfPJw3HoQoDOpBI0juPtiAofafk1faMeqyqWGWYh7wZdP1oyIQ9lG:4+jO39tjAoCM1fwGWawP1eQoO9Obud+
Malware Config
Signatures
Files
-
ba20cb209db96efc896a3a4c19c41afcbf9c692023fcbea0b9ec36530a5ab110.exe windows x86
eb58ab5a3c8a863c4d8c4b2e9f905cdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
WaitForSingleObject
CloseHandle
CreateThread
GetSystemInfo
Sleep
GetCurrentProcessId
CreateMutexA
GetTickCount
GetModuleHandleA
GetStartupInfoA
advapi32
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ws2_32
gethostbyname
select
__WSAFDIsSet
recv
inet_addr
socket
connect
send
gethostname
inet_ntoa
WSAStartup
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
WSAIoctl
iphlpapi
GetIfTable
msvcrt
fprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
??2@YAPAXI@Z
strcpy
_local_unwind2
_except_handler3
sprintf
rand
memset
printf
memcpy
_iob
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE