Static task
static1
Behavioral task
behavioral1
Sample
bbb42322f197a1068ae700a49b44eb27fe3af03f71b242a79e6597069c74966f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbb42322f197a1068ae700a49b44eb27fe3af03f71b242a79e6597069c74966f.exe
Resource
win10v2004-20220812-en
General
-
Target
bbb42322f197a1068ae700a49b44eb27fe3af03f71b242a79e6597069c74966f
-
Size
11KB
-
MD5
6155e19268edf695a4f5e2baba733db1
-
SHA1
2585333c302b4e8eeabe9d2f7718204361210b17
-
SHA256
bbb42322f197a1068ae700a49b44eb27fe3af03f71b242a79e6597069c74966f
-
SHA512
1fe2ba275f765988d528abe314d3ce94a6ea5aeb0242328408b091c5df75f30313a0e20b2d3f04933dc11a58c7768e7c151963dd4849965616768b7908cf0d8d
-
SSDEEP
192:caDtGDgKvBmpDwid/PiK2YYrKaLAibgbrqgiIzCKfVGxP0:cMt3EiUiNajYYrVAibgbmgjXVGd
Malware Config
Signatures
Files
-
bbb42322f197a1068ae700a49b44eb27fe3af03f71b242a79e6597069c74966f.exe windows x86
d185f94ef89f36ce94db7b3653967d5e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetOpenA
InternetCloseHandle
ws2_32
WSAStartup
ioctlsocket
connect
recvfrom
select
WSAGetLastError
htons
setsockopt
sendto
recv
socket
closesocket
gethostbyname
send
dnsapi
DnsQuery_A
DnsQueryConfig
kernel32
ExitProcess
CreateFileA
lstrlenA
WriteFile
lstrcatA
GetProcAddress
CreateThread
TerminateProcess
WaitForSingleObject
LocalFree
LocalAlloc
GetTempPathA
CloseHandle
GetModuleFileNameA
LoadLibraryA
GetTickCount
user32
wsprintfA
msvcrt
memcpy
memset
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ