Static task
static1
Behavioral task
behavioral1
Sample
28f7ec75560a465b4d3b5d32147c28c844c548f9d2529915bcf1afb8b93ddc11.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
28f7ec75560a465b4d3b5d32147c28c844c548f9d2529915bcf1afb8b93ddc11.exe
Resource
win10v2004-20220812-en
General
-
Target
28f7ec75560a465b4d3b5d32147c28c844c548f9d2529915bcf1afb8b93ddc11
-
Size
20KB
-
MD5
84804f7ca227ddce7dcd4d77f1a48990
-
SHA1
8db47d28ce3e42f985387ff0071d238f2c48c045
-
SHA256
28f7ec75560a465b4d3b5d32147c28c844c548f9d2529915bcf1afb8b93ddc11
-
SHA512
aba8e25d635e9ced86af94f0d42749af8eff8bcab6ecebb2459eb4178e603667c321f16e94d9b5f9cd1222ed49ac63309b6aed7a26ab1593ff3dcafd8f8f9b80
-
SSDEEP
384:nDzfptYzgHpTM5Gt+aUmab+wP1eCoO9Obud+:nDzfDYzgHp+2+ss5v
Malware Config
Signatures
Files
-
28f7ec75560a465b4d3b5d32147c28c844c548f9d2529915bcf1afb8b93ddc11.exe windows x86
d7fc8ccec42b34387e806e6694f272b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CloseHandle
CreateThread
GetSystemInfo
Sleep
GetCurrentProcessId
GetTickCount
GetModuleHandleA
GetStartupInfoA
advapi32
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ws2_32
gethostbyname
select
inet_addr
recv
WSAIoctl
socket
connect
send
gethostname
inet_ntoa
WSAStartup
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
__WSAFDIsSet
iphlpapi
GetIfTable
msvcrt
_iob
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
??2@YAPAXI@Z
strcpy
sprintf
rand
memset
printf
fprintf
_local_unwind2
memcpy
_except_handler3
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE