Static task
static1
Behavioral task
behavioral1
Sample
c3093f28e96759fd0a5a206addf305fce46bc2c9bf674922d8d4aa47b1095da4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3093f28e96759fd0a5a206addf305fce46bc2c9bf674922d8d4aa47b1095da4.exe
Resource
win10v2004-20220812-en
General
-
Target
c3093f28e96759fd0a5a206addf305fce46bc2c9bf674922d8d4aa47b1095da4
-
Size
14KB
-
MD5
43b382cf59a8f45c4ce89c30b83a2ca0
-
SHA1
00d1ce4db3da20d7f2cc0a3b8630007e00bdc105
-
SHA256
c3093f28e96759fd0a5a206addf305fce46bc2c9bf674922d8d4aa47b1095da4
-
SHA512
509823b8507aabfb6200c614110b2095a8fa477c471a7b8b3626acf3a2916375bbd45ffce6e32719097413055226e6282a791403fd7c6653b9f2df71c1835c1c
-
SSDEEP
192:HGsX2kxR0wvrhy6pqHg6cQ4D4oPI+p3uXJzIMk1ZNURW0lW1H0gjdY5IGc/WI:HGsX2kxR0mrhyMDDpI/IvZNURW0lWdf
Malware Config
Signatures
Files
-
c3093f28e96759fd0a5a206addf305fce46bc2c9bf674922d8d4aa47b1095da4.exe windows x86
e4ad958426975b052f8ffe6aa6da1b62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
__getmainargs
__initenv
_except_handler3
_adjust_fdiv
_cexit
_XcptFilter
_exit
_c_exit
isspace
exit
strtoul
_write
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
SetConsoleCtrlHandler
LocalFree
FormatMessageA
Sleep
GetModuleHandleA
GetLastError
LocalAlloc
iphlpapi
IcmpSendEcho2
IcmpCloseHandle
IcmpCreateFile
user32
CharToOemBuffA
ws2_32
gethostbyaddr
inet_ntoa
WSAStartup
gethostbyname
inet_addr
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ