Static task
static1
Behavioral task
behavioral1
Sample
2ffd6c79b26ed2a7ca70affb49781252c2847c34be6d46b0ab8e0d9305845bc1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ffd6c79b26ed2a7ca70affb49781252c2847c34be6d46b0ab8e0d9305845bc1.exe
Resource
win10v2004-20220812-en
General
-
Target
2ffd6c79b26ed2a7ca70affb49781252c2847c34be6d46b0ab8e0d9305845bc1
-
Size
611KB
-
MD5
26f8fcc704af4245c5c67caa37e777a5
-
SHA1
df2f20bd1f2fe6f47bc03a603c00ac01a80e4fa0
-
SHA256
2ffd6c79b26ed2a7ca70affb49781252c2847c34be6d46b0ab8e0d9305845bc1
-
SHA512
1994f1a7c47ad287edde26d6a5c45be7f40a04ef3d9975008e4965113c2c534be426f712def38c1c1e0de0020b1a256cbb9381a7ab42b5941bc85afce04d66bd
-
SSDEEP
12288:Gq8BMAiIfJeTv5gtUvdr/Y6F0squvMDogGMxblPsL8r:GqqMAiI0TrvdrQ6iJuvMDo/MxZ
Malware Config
Signatures
Files
-
2ffd6c79b26ed2a7ca70affb49781252c2847c34be6d46b0ab8e0d9305845bc1.exe windows x86
53c8ae00f7c83d32aa4766f7fbf6dae3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
send
connect
htons
recv
inet_addr
WSACleanup
WSAGetLastError
socket
WSAStartup
closesocket
gdiplus
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCloneImage
kernel32
GetLocaleInfoA
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
HeapQueryInformation
HeapSize
HeapReAlloc
CopyFileW
CopyFileA
CreateThread
Sleep
GetFileAttributesA
ExitProcess
CloseHandle
WaitForSingleObject
CreateProcessW
GetEnvironmentVariableW
IsValidLocale
GetModuleFileNameW
GetModuleHandleW
GetEnvironmentVariableA
SetErrorMode
GetModuleFileNameA
SetConsoleCtrlHandler
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
FlushFileBuffers
FatalAppExitA
FreeLibrary
VirtualQuery
GetProcessHeap
HeapAlloc
HeapFree
GetConsoleMode
GetConsoleCP
WriteFile
SetFilePointer
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetStdHandle
CreateFileA
CreateFileW
GetTimeZoneInformation
SetEndOfFile
CompareStringW
GetCurrentProcessId
RtlUnwind
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
SetEnvironmentVariableA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
IsDebuggerPresent
RaiseException
lstrlenA
GetProcAddress
LoadLibraryW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapValidate
IsBadReadPtr
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
ReadFile
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
GetFileType
user32
SetWindowsHookExW
GetMessageW
TranslateMessage
DispatchMessageW
CallNextHookEx
GetAsyncKeyState
GetKeyboardState
GetKeyState
GetForegroundWindow
GetWindowThreadProcessId
GetKeyboardLayout
MapVirtualKeyExW
GetWindowTextW
ToUnicodeEx
wsprintfW
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateDIBSection
DeleteDC
SaveDC
SelectObject
BitBlt
RestoreDC
DeleteObject
CreateDCA
Sections
.textbss Size: - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 482KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ