Static task
static1
Behavioral task
behavioral1
Sample
62acdf64fc1aff45a7e89a351f13682719fc842b0d3092fcfb4a959f147f9600.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
62acdf64fc1aff45a7e89a351f13682719fc842b0d3092fcfb4a959f147f9600.exe
Resource
win10v2004-20220901-en
General
-
Target
62acdf64fc1aff45a7e89a351f13682719fc842b0d3092fcfb4a959f147f9600
-
Size
8KB
-
MD5
af6ff6c2b27d49f753a99856fa9a5282
-
SHA1
04192b2d63d123967f95392e135573ef72eadb45
-
SHA256
62acdf64fc1aff45a7e89a351f13682719fc842b0d3092fcfb4a959f147f9600
-
SHA512
fd09fcd3b082b6f573613190ed1ebf57b4a282e09c122fa7320444232c051f6fad5f5c9e4c8e5ad3020b4ae99d098ee1f72def38c6042818c670429d71dc80eb
-
SSDEEP
192:1Ipf39OHyiO7IgLX7/TPXd0h3IdTEUHP1oynvEG00iFU9O0Y:GYyiYh7zXK+Trv1C
Malware Config
Signatures
Files
-
62acdf64fc1aff45a7e89a351f13682719fc842b0d3092fcfb4a959f147f9600.exe windows x86
5fdd4f0d53aca56875017c5facbff119
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
GetShortPathNameA
GetCurrentProcess
GetStartupInfoA
GetModuleHandleA
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetModuleFileNameA
GetWindowsDirectoryA
lstrcatA
Sleep
CreateMutexA
CopyFileA
CreateThread
WaitForSingleObject
CloseHandle
GetVersion
ExitProcess
GetTickCount
ws2_32
htons
socket
send
inet_addr
select
WSAStartup
gethostbyname
connect
closesocket
recv
shell32
ShellExecuteA
advapi32
RegCloseKey
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
ChangeServiceConfig2A
CreateServiceA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
StartServiceCtrlDispatcherA
DeleteService
user32
wsprintfA
msvcrt
strlen
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
memset
rand
srand
strcmp
strtok
strncpy
strstr
sprintf
strcpy
_strnicmp
strcat
fclose
fopen
_exit
_XcptFilter
exit
_acmdln
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE