Static task
static1
Behavioral task
behavioral1
Sample
8ac0653d9ef829f02f2d10fff0301c027155bc9ae5866700993625cb9c77598c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ac0653d9ef829f02f2d10fff0301c027155bc9ae5866700993625cb9c77598c.exe
Resource
win10v2004-20221111-en
General
-
Target
8ac0653d9ef829f02f2d10fff0301c027155bc9ae5866700993625cb9c77598c
-
Size
6KB
-
MD5
d3f38e57e71a4c38585b37ecac49b4b3
-
SHA1
ce9a17364bdeb9862851172f8d87cdde3da68768
-
SHA256
8ac0653d9ef829f02f2d10fff0301c027155bc9ae5866700993625cb9c77598c
-
SHA512
13d80895dfb078626bfc1b5a27db51616b9a9980a16624cb19f065fbbdb38ee3bd8f171809152f68993a65ba8ddea1fa7e6b0702554cea4e7e72a411ac5c97ac
-
SSDEEP
96:VDEMDCZzw5jwb33hQCITLb2cIMucM7pMDjRmLcfRHSoiMfDEiMbY:FEM+ZE5MBQCITLic4bpWR4cfNSL
Malware Config
Signatures
Files
-
8ac0653d9ef829f02f2d10fff0301c027155bc9ae5866700993625cb9c77598c.exe windows x86
f71bc5fa46db78c8e392371237f07029
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
socket
gethostbyname
htons
connect
send
closesocket
shlwapi
wnsprintfA
kernel32
Sleep
IsBadReadPtr
ExitProcess
GetEnvironmentVariableW
lstrcatW
HeapFree
CloseHandle
ReadFile
CreateFileW
HeapAlloc
GetProcessHeap
FindNextFileW
FindClose
FindFirstFileW
lstrcpyW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ