Static task
static1
Behavioral task
behavioral1
Sample
051351b91dbd1f396c0a48717a85987fc83ddb823bc7a912ad31f76817c43be2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
051351b91dbd1f396c0a48717a85987fc83ddb823bc7a912ad31f76817c43be2.exe
Resource
win10v2004-20221111-en
General
-
Target
051351b91dbd1f396c0a48717a85987fc83ddb823bc7a912ad31f76817c43be2
-
Size
23KB
-
MD5
02072dc1b11381e3d4a82631f03db8f0
-
SHA1
3707914410425172db1361ce879fd0c9cd5fdbc4
-
SHA256
051351b91dbd1f396c0a48717a85987fc83ddb823bc7a912ad31f76817c43be2
-
SHA512
736cd89b3dfe30ced3c1b3cd751b8e15090d556aae24427f3b6cf796e51fb407908d02471fb399c9bc8417d156eb6f41506d7158ff51cef535406bca453d69f3
-
SSDEEP
384:LyrQd7exXpYPb5gYacmir/bXL93SxlwMx6JN53XU7VKzOboT7I1yRyXky5:LoYexXpqbjDDLJHqzuY
Malware Config
Signatures
Files
-
051351b91dbd1f396c0a48717a85987fc83ddb823bc7a912ad31f76817c43be2.exe windows x86
28578e8e00ccdf9371c5624df8f16efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetModuleHandleA
CreateProcessA
TerminateProcess
Sleep
ExitThread
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetTickCount
shell32
ShellExecuteA
ws2_32
__WSAFDIsSet
recv
setsockopt
select
htons
socket
connect
closesocket
send
WSACleanup
gethostbyname
inet_addr
sendto
WSASocketA
htonl
WSAStartup
WSAIoctl
winmm
timeGetTime
msvcrt
rand
sprintf
_controlfp
__set_app_type
strstr
atoi
strncpy
strcspn
strncmp
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
malloc
user32
wsprintfA
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE