Static task
static1
Behavioral task
behavioral1
Sample
98be5370cdd167367804d9af837c360dfd53be9d1116dd0036cc8ee86e10cb46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98be5370cdd167367804d9af837c360dfd53be9d1116dd0036cc8ee86e10cb46.exe
Resource
win10v2004-20221111-en
General
-
Target
98be5370cdd167367804d9af837c360dfd53be9d1116dd0036cc8ee86e10cb46
-
Size
28KB
-
MD5
37dc7934af6147056f5345348779c44d
-
SHA1
2e53cc5d52c807398217e75d1254f78fbfea00ec
-
SHA256
98be5370cdd167367804d9af837c360dfd53be9d1116dd0036cc8ee86e10cb46
-
SHA512
a5f9717f70b8993c36c586d2e732cfed33dc508200196ae376588a2048e7196ab1c4ee04c59c7975388ffe8eb9895c277fe463e60a7bf497b9773b806de850c7
-
SSDEEP
768:tROjXnOnxMZWFV7DA5MqCTyEFD8u7pD/:tKXcxjQXm7t/
Malware Config
Signatures
Files
-
98be5370cdd167367804d9af837c360dfd53be9d1116dd0036cc8ee86e10cb46.exe windows x86
4ee4429db8ad385ccf6d9120dcc3c7e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
FreeLibrary
CreateProcessA
TerminateProcess
CloseHandle
GetModuleHandleA
GetProcAddress
Sleep
WinExec
lstrcpyA
lstrcatA
ExitThread
ExitProcess
OpenMutexA
OutputDebugStringA
WaitForSingleObject
CreateThread
GetLastError
CreateMutexA
GetStartupInfoA
GetModuleFileNameA
user32
wsprintfA
advapi32
RegOpenKeyExA
ws2_32
__WSAFDIsSet
recv
shutdown
WSAIoctl
send
gethostname
inet_ntoa
WSAStartup
select
setsockopt
htonl
sendto
WSACleanup
socket
htons
connect
closesocket
WSASocketA
WSAGetLastError
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
strstr
free
malloc
realloc
??2@YAPAXI@Z
??3@YAXPAX@Z
rand
sprintf
printf
fprintf
_iob
_except_handler3
_local_unwind2
strncpy
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ