Static task
static1
Behavioral task
behavioral1
Sample
c11f175d19a268adfca063c3f95b318e92af90f8b325878f6090ed4aa544384d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c11f175d19a268adfca063c3f95b318e92af90f8b325878f6090ed4aa544384d.exe
Resource
win10v2004-20221111-en
General
-
Target
c11f175d19a268adfca063c3f95b318e92af90f8b325878f6090ed4aa544384d
-
Size
1KB
-
MD5
98e1f006e1cf65a08cb73f10fa5ecb9f
-
SHA1
bb3122475a15349326a2c50c1e3d46fd9e305336
-
SHA256
c11f175d19a268adfca063c3f95b318e92af90f8b325878f6090ed4aa544384d
-
SHA512
e07019ff6111d83c0938b5ef464c60ffa246ac4fc12abb49ada843ebd49b72dde5bb3ff4a0e8fda260e01d062b6fafa072c3b092b1facf3b055f5fbc27f1ae25
Malware Config
Signatures
Files
-
c11f175d19a268adfca063c3f95b318e92af90f8b325878f6090ed4aa544384d.exe windows x86
cbff8c9c710d05acda4d7b43a65dcfee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForSingleObject
CreateProcessA
Sleep
GetEnvironmentVariableA
ws2_32
WSACleanup
closesocket
WSASocketA
htons
gethostbyname
WSAStartup
connect
Sections
DNA32r Size: 704B - Virtual size: 704B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE