Static task
static1
Behavioral task
behavioral1
Sample
761e3cee2c7bedfa7564108655e3b2f4dc1f175a8ec616e5d9591f6d89e87008.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
761e3cee2c7bedfa7564108655e3b2f4dc1f175a8ec616e5d9591f6d89e87008.exe
Resource
win10v2004-20220812-en
General
-
Target
761e3cee2c7bedfa7564108655e3b2f4dc1f175a8ec616e5d9591f6d89e87008
-
Size
193KB
-
MD5
ae1b8e041cceaf14781ebf98a4d70b64
-
SHA1
8f9c41cf9bc227ed041df954de0e1416c8cb5c09
-
SHA256
761e3cee2c7bedfa7564108655e3b2f4dc1f175a8ec616e5d9591f6d89e87008
-
SHA512
341f2256d515ead7aff3e1320bf97664e7f17197ac26e40d907e237c5afe207f851e1b893ab955d6f2a2f1208ae71bb8d59a5c7cd97bd6fac5e55fdd4ad1369d
-
SSDEEP
6144:plXxBOGrfZWhiE2d9fc6THm1AOfp5rx7:jTOGrfZWh32d9k6jHOfp5
Malware Config
Signatures
Files
-
761e3cee2c7bedfa7564108655e3b2f4dc1f175a8ec616e5d9591f6d89e87008.exe windows x86
d15043f6c4ad367b39930cfa9cdbbed4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
IsBadReadPtr
OpenProcess
FlushInstructionCache
MulDiv
GetLocaleInfoW
QueryPerformanceFrequency
GlobalFree
GlobalAlloc
GlobalUnlock
GetWindowsDirectoryW
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileW
MoveFileExA
GetDateFormatA
FreeResource
FindResourceA
LockResource
GetSystemDirectoryW
CreateEventA
GlobalMemoryStatus
LeaveCriticalSection
FileTimeToSystemTime
HeapWalk
HeapReAlloc
HeapAlloc
HeapCreate
HeapFree
GetFileAttributesW
SetFileAttributesA
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
MoveFileW
GetStartupInfoA
ws2_32
ioctlsocket
listen
ntohl
inet_ntoa
inet_addr
select
recv
send
socket
WSACloseEvent
WSAWaitForMultipleEvents
WSACreateEvent
WSAGetOverlappedResult
WSASocketA
WSAConnect
msvcr71
fread
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
time
strchr
wcslen
exit
atoi
memmove
fclose
_controlfp
fseek
fopen
_c_exit
_exit
_XcptFilter
_ismbblead
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ