Static task
static1
Behavioral task
behavioral1
Sample
a00aec5a51c0f5063b36d696870fd74402e7ac7f8d689fde6f0915bc68019b4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a00aec5a51c0f5063b36d696870fd74402e7ac7f8d689fde6f0915bc68019b4a.exe
Resource
win10v2004-20220812-en
General
-
Target
a00aec5a51c0f5063b36d696870fd74402e7ac7f8d689fde6f0915bc68019b4a
-
Size
11KB
-
MD5
2da5fd861b19d0e7bfb5c4b5361631ff
-
SHA1
1a4268a90f51c84e447eeb7cdc46abded2c74b94
-
SHA256
a00aec5a51c0f5063b36d696870fd74402e7ac7f8d689fde6f0915bc68019b4a
-
SHA512
20b7fc782b43c87fbe6ee7efc83becf609062a8b3ec3580af002b2a3e632b65f61077efa9a6905d4cd1a2f99054ad01a31f6ec6a86426b98b67b657fea8212d0
-
SSDEEP
192:RjfI7WcS+dHjv3zfe8Qt0F36Wtd8UAgHlzOXqN8pA88OjLqhcau4E5:VI7WcSBt0Ftvx/YXqKpABw6cap
Malware Config
Signatures
Files
-
a00aec5a51c0f5063b36d696870fd74402e7ac7f8d689fde6f0915bc68019b4a.exe windows x86
48573ffe0c248dfef2a67e516e2b6ee6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
WaitForMultipleObjects
DeleteCriticalSection
CloseHandle
ExitProcess
GetCommandLineW
GetModuleFileNameW
LocalFree
HeapReAlloc
HeapAlloc
HeapFree
GetTickCount
SetConsoleCtrlHandler
WriteFile
GetConsoleMode
WriteConsoleW
MultiByteToWideChar
GetStdHandle
SetLastError
GetFileType
CreateThread
EnterCriticalSection
GetLastError
LeaveCriticalSection
WaitForSingleObject
InitializeCriticalSection
SetEvent
GetProcessHeap
shlwapi
PathUnquoteSpacesW
StrChrW
wvnsprintfW
PathFindFileNameW
shell32
CommandLineToArgvW
ws2_32
listen
send
closesocket
WSASetLastError
WSAGetLastError
bind
recv
WSACleanup
setsockopt
shutdown
select
WSAStartup
WSAAddressToStringW
WSAIoctl
accept
socket
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE