Static task
static1
Behavioral task
behavioral1
Sample
d58fbb4e3576093aefd4a75cbef386edc7311ff5d1938f5014549c4fa23e5f29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d58fbb4e3576093aefd4a75cbef386edc7311ff5d1938f5014549c4fa23e5f29.exe
Resource
win10v2004-20220812-en
General
-
Target
d58fbb4e3576093aefd4a75cbef386edc7311ff5d1938f5014549c4fa23e5f29
-
Size
172KB
-
MD5
3f7687358626c95ba55531144af25294
-
SHA1
001b4bc60dffa8841b931277fa98bd71c59a25ca
-
SHA256
d58fbb4e3576093aefd4a75cbef386edc7311ff5d1938f5014549c4fa23e5f29
-
SHA512
85b9eb28318af6fb80fcf5898a5e8dc866d96c1f5dabfcb4980dfda023dc37d91a3854fb57fd6ee51fc62fef750081f051e039d70292fa7ced38b125c12cfe6f
-
SSDEEP
1536:0mYURO46xCO62ppHdQfEm8Dy1BQ4oN03BiuY92woWgUT4nH:mCOFoO6OHDm8uQ4oO3B9Y1oTo4H
Malware Config
Signatures
Files
-
d58fbb4e3576093aefd4a75cbef386edc7311ff5d1938f5014549c4fa23e5f29.exe windows x86
bac4a9a38ccb9802526e5a88e1e34a48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
SetHandleCount
lstrlenA
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
SetStdHandle
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
VirtualAlloc
RtlUnwind
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
IsBadReadPtr
GetLastError
SetFilePointer
SetConsoleCtrlHandler
IsBadWritePtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
ws2_32
WSAStartup
socket
WSAGetLastError
WSACleanup
htons
inet_addr
connect
recv
closesocket
send
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ