Static task
static1
Behavioral task
behavioral1
Sample
9355f2b79068b44347b51292332e6238d2a8256e75c36a24ab9ac39485ac787f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9355f2b79068b44347b51292332e6238d2a8256e75c36a24ab9ac39485ac787f.exe
Resource
win10v2004-20220812-en
General
-
Target
9355f2b79068b44347b51292332e6238d2a8256e75c36a24ab9ac39485ac787f
-
Size
52KB
-
MD5
3e2cc4fb0c4cdf27550406250cdb8fb4
-
SHA1
6a6b82adf7f68bf30eefbf820e7e22cd69c01b6c
-
SHA256
9355f2b79068b44347b51292332e6238d2a8256e75c36a24ab9ac39485ac787f
-
SHA512
6a4076fcce6dd8ac536af82954cf969f0cd96f537c26278009983561e1cfba579a2756656e16c41b5c3ff2b83674ab7348bad5acf2cf7cff8e5aa2512e343338
-
SSDEEP
768:gWCaHHM3c0F0uA9l+LqKCg+7UYO3aUs8UpVLmO:qanM3eCCgEUY2sDZ
Malware Config
Signatures
Files
-
9355f2b79068b44347b51292332e6238d2a8256e75c36a24ab9ac39485ac787f.exe windows x86
65361bdfb6942bda99a639705ca2e899
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
ReadFile
CloseHandle
lstrcatA
GetSystemDirectoryA
GetStartupInfoA
CreatePipe
lstrlenA
GlobalFree
GetLocalTime
GlobalAlloc
ExitThread
Sleep
CreateProcessA
CreateThread
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
FlushFileBuffers
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
ws2_32
inet_addr
WSAStartup
connect
recv
send
socket
setsockopt
htons
bind
listen
accept
gethostbyname
inet_ntoa
gethostname
closesocket
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE