Static task
static1
Behavioral task
behavioral1
Sample
NetCut.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
NetCut.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
infektor.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
infektor.exe
Resource
win10v2004-20221111-en
General
-
Target
85c923b6dc28a728e372331f6b1e4264809794b875f491ee4cb3147b6af20706
-
Size
1.7MB
-
MD5
3ea2db0de4c164e89f355622a1d0e4ab
-
SHA1
02044b597f746f966426ac69f813c78065d612ff
-
SHA256
85c923b6dc28a728e372331f6b1e4264809794b875f491ee4cb3147b6af20706
-
SHA512
13427dcad364dcf59cfa05db87f8ddb9d9623a93044e10045672da9adebbcf840ddcb92c999a912d22b47b2801a38cd78527da21e64113283f8eec5463e5497d
-
SSDEEP
49152:Dmtn+tAugrrzR3FLptonWsnNTVSpTwaYm0n8/uPQtrG0d:Ctn+tATrrzvLidTVo03n8BrGm
Malware Config
Signatures
Files
-
85c923b6dc28a728e372331f6b1e4264809794b875f491ee4cb3147b6af20706.cab
-
NetCut.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
infektor.exe.exe windows x86
b1a3dd4725d13992af1a0e82f338626a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
user32
MessageBoxA
wvsprintfW
MessageBoxA
GetWindowThreadProcessId
GetWindowTextW
GetMessageW
GetForegroundWindow
FindWindowW
DispatchMessageW
kernel32
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetCommandLineW
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WinExec
Sleep
ReadProcessMemory
OpenProcess
LoadLibraryW
GetVersionExW
GetProcAddress
GetModuleFileNameW
GetLastError
GetFileAttributesW
FreeLibrary
ExitProcess
CreateThread
CreateMutexW
CopyFileExW
CloseHandle
shell32
SHGetSpecialFolderPathW
ShellExecuteW
wsock32
WSAStartup
send
inet_addr
htons
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 31B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ