Static task
static1
Behavioral task
behavioral1
Sample
c223157a6558be8c9392c4963c2ce4ea77c1fc4827437e7fc5b89e6b8619bd97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c223157a6558be8c9392c4963c2ce4ea77c1fc4827437e7fc5b89e6b8619bd97.exe
Resource
win10v2004-20220812-en
General
-
Target
c223157a6558be8c9392c4963c2ce4ea77c1fc4827437e7fc5b89e6b8619bd97
-
Size
109KB
-
MD5
579aefa52c78d32f62dc29ad1c765f14
-
SHA1
3c333712e68fb043c29d0402c6d355e3a8f7ca8d
-
SHA256
c223157a6558be8c9392c4963c2ce4ea77c1fc4827437e7fc5b89e6b8619bd97
-
SHA512
93cd36db388d72806c71f2528b1d0753b49fa096e87d90a240f4d6966615331ca3af976e6f496cdd77d8f53e5d664a62295e93ddd1deddd6517c86ce58d0ca75
-
SSDEEP
3072:TCBwb5l39yr+LVDxki0s0mCe/zO2kvHUTKtz:Tv119BoiL0mVO0gz
Malware Config
Signatures
Files
-
c223157a6558be8c9392c4963c2ce4ea77c1fc4827437e7fc5b89e6b8619bd97.exe windows x86
aa40f0ee5b9946a9515f2b777acdda65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
GetAcceptExSockaddrs
rexec
shutdown
dn_expand
__WSAFDIsSet
WSASetLastError
WSACleanup
WSAAsyncGetServByPort
htonl
msvcrt
?unexpected@@YAXXZ
_Gettnames
__dllonexit
__unDName
??_U@YAPAXI@Z
_CItanh
__doserrno
__p__osver
_adj_fdiv_m32i
user32
AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint
wininet
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
FtpDeleteFileA
ForceNexusLookupExW
GopherCreateLocatorA
HttpAddRequestHeadersA
IncrementUrlCacheHeaderData
InternetAutodial
Sections
.text Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE