Static task
static1
Behavioral task
behavioral1
Sample
5bb941c0e12faf63a1d9ea34cc9dbacc8ad7f4c379d9efeb52553e795282f368.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bb941c0e12faf63a1d9ea34cc9dbacc8ad7f4c379d9efeb52553e795282f368.exe
Resource
win10v2004-20220812-en
General
-
Target
5bb941c0e12faf63a1d9ea34cc9dbacc8ad7f4c379d9efeb52553e795282f368
-
Size
315KB
-
MD5
2f7efd6ba29680659d2aa0a1c246a56b
-
SHA1
c297ee9de3429b0ae6a1518c110bda40ffb67f47
-
SHA256
5bb941c0e12faf63a1d9ea34cc9dbacc8ad7f4c379d9efeb52553e795282f368
-
SHA512
dec77f6484bcecd42c285250e7de4936d2dc6773df9e8c14681502489928fbe2bb7526a2d60022a547e38657d6ea7d74ae204b0c052e7de882c69960e6b40c0b
-
SSDEEP
6144:CiEYw3dkG8hlZ2bEmfED1VpFZ3WYjc7ZQkV+4HT/lgoydR95pT:R3yCGklZ2bEzD1PsLTlgoydR9L
Malware Config
Signatures
Files
-
5bb941c0e12faf63a1d9ea34cc9dbacc8ad7f4c379d9efeb52553e795282f368.exe windows x86
c6898ab877063d15da3dfec542f0f578
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
floor
ceil
_CIasin
strcmp
strcpy
sprintf
strncpy
strlen
strstr
memcpy
localtime
mktime
kernel32
GetModuleHandleA
HeapCreate
CreateThread
HeapDestroy
ExitProcess
GetCommandLineA
GetCurrentProcess
WideCharToMultiByte
HeapFree
Sleep
GetLocalTime
HeapReAlloc
HeapAlloc
CreateFileA
ReadFile
CloseHandle
wsock32
WSAGetLastError
closesocket
WSACleanup
WSAStartup
recv
send
htons
sendto
winmm
timeBeginPeriod
timeEndPeriod
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ