Static task
static1
Behavioral task
behavioral1
Sample
f613436786452d6fbd6ed1dd14064470d503d513a672ca392e7941000603aa0d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f613436786452d6fbd6ed1dd14064470d503d513a672ca392e7941000603aa0d.exe
Resource
win10v2004-20220812-en
General
-
Target
f613436786452d6fbd6ed1dd14064470d503d513a672ca392e7941000603aa0d
-
Size
1008KB
-
MD5
064baf9b7a1679cd7bd191a12ed3c21b
-
SHA1
c231a3cd0dc74a99f8a74f7f4e73dc0113931c6a
-
SHA256
f613436786452d6fbd6ed1dd14064470d503d513a672ca392e7941000603aa0d
-
SHA512
39985af69f4cc7cd0d81f191fafebd49468217e41daa00e33e1712e524a6320e8e3e77376a975012e96dc20baf65af015a749206fca4392dbf86ec57e6704fd5
-
SSDEEP
12288:6r7m8AnuR9eh6M4nz3WwkaFZ8/IRbgJTpXgpJCSVXfA5pnnyzf:6Xsy9r7ka78wR8J+pJCMqpnnyzf
Malware Config
Signatures
Files
-
f613436786452d6fbd6ed1dd14064470d503d513a672ca392e7941000603aa0d.exe windows x86
a166aa4d5bcb772b985eb04780979b9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ioctlsocket
WSASetLastError
select
__WSAFDIsSet
accept
listen
recvfrom
sendto
gethostname
gethostbyname
htons
bind
ntohs
getsockname
shutdown
socket
connect
getsockopt
recv
send
WSAGetLastError
closesocket
WSAStartup
WSACleanup
setsockopt
kernel32
FlushConsoleInputBuffer
GetCurrentThreadId
GetVersion
GetVersionExA
QueryPerformanceCounter
GlobalMemoryStatus
Sleep
FreeLibrary
GlobalFree
GlobalAlloc
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
SetLastError
FormatMessageA
GetLastError
SleepEx
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
GetTickCount
ExpandEnvironmentStringsA
CloseHandle
WaitForSingleObject
GetCurrentProcessId
user32
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
gdi32
CreateDCA
CreateCompatibleDC
DeleteObject
GetBitmapBits
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
msvcrt
__set_app_type
_controlfp
_unlink
_close
_read
_ftime
_strdup
localtime
_stricmp
_strnicmp
malloc
_stat
_errno
_findclose
_findnext
_findfirst
free
??3@YAXPAX@Z
strchr
fclose
strncmp
strncpy
fgets
fopen
sprintf
_access
fwrite
fread
strstr
_snprintf
__CxxFrameHandler
_fileno
sscanf
isxdigit
rename
_utime
printf
fflush
_iob
fprintf
time
atoi
memmove
??2@YAPAXI@Z
gmtime
_vsnprintf
puts
ftell
fputs
_daylight
_timezone
_tzset
calloc
realloc
strrchr
strerror
_sys_nerr
strtoul
tolower
_pctype
__mb_cur_max
_isctype
fseek
qsort
strtol
fputc
_ftol
memchr
_lseeki64
_fstati64
getenv
_beginthreadex
_stati64
_chmod
_open
_except_handler3
_exit
raise
wcsstr
vfprintf
strcmp
isspace
isdigit
_setmode
isupper
_getch
signal
__dllonexit
_onexit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
msvcp60
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Xlen@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
Sections
.text Size: 716KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 232KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE