Static task
static1
Behavioral task
behavioral1
Sample
83f4e63681fcba8a9d7bbb1688c71981b1837446514a1773597e0192bba9fac3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83f4e63681fcba8a9d7bbb1688c71981b1837446514a1773597e0192bba9fac3.exe
Resource
win10v2004-20220812-en
General
-
Target
83f4e63681fcba8a9d7bbb1688c71981b1837446514a1773597e0192bba9fac3
-
Size
57KB
-
MD5
7c297600870d026c014d42596bb9b5fd
-
SHA1
3b304a4c8644b03486ddca059e92188ea56e2c97
-
SHA256
83f4e63681fcba8a9d7bbb1688c71981b1837446514a1773597e0192bba9fac3
-
SHA512
ee4a0154151d80911213a930cd9c2070ff017ba4d70774ce85313df4f6ab416a2e6b5661f9caf4953321cbdfada96d39b3d88a67485d21529e6ad61914feb782
-
SSDEEP
1536:Jvf824F6eq0wiRensooBsmaDAuy66gOdulX8:224F6e5wAOoBDuryM8
Malware Config
Signatures
Files
-
83f4e63681fcba8a9d7bbb1688c71981b1837446514a1773597e0192bba9fac3.exe windows x86
51169c401612d557f0c2bf3977bf45a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileW
MoveFileExA
GetDateFormatA
FreeResource
FindResourceA
LoadResource
GetProcessHeap
GetSystemTimeAsFileTime
GetCPInfo
FindClose
RemoveDirectoryW
MoveFileW
FindNextFileW
FindFirstFileW
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
WriteConsoleA
GetStartupInfoA
ws2_32
WSAStartup
WSAEnumNetworkEvents
htonl
getservbyname
htons
ntohs
recv
send
recvfrom
WSAAddressToStringA
WSAWaitForMultipleEvents
getsockopt
msvcr71
fread
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
wcslen
exit
fwrite
fputs
free
realloc
malloc
strchr
memmove
fclose
_controlfp
fseek
fopen
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ