Static task
static1
Behavioral task
behavioral1
Sample
332ce7d1f6a7fe0e1e1e50f442d5af7556bec27f5bef17ae02ecaba52418fc6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
332ce7d1f6a7fe0e1e1e50f442d5af7556bec27f5bef17ae02ecaba52418fc6e.exe
Resource
win10v2004-20221111-en
General
-
Target
332ce7d1f6a7fe0e1e1e50f442d5af7556bec27f5bef17ae02ecaba52418fc6e
-
Size
504KB
-
MD5
30a401529063a943b082470461305718
-
SHA1
18a77dab34e8995b55141937a0a1facfffec5e80
-
SHA256
332ce7d1f6a7fe0e1e1e50f442d5af7556bec27f5bef17ae02ecaba52418fc6e
-
SHA512
0b8852ad75ebfcbe5422ac2b99b2f312960f7a260325167da3dfeea677e59c81724c1acddeb06fa57302b65265db58df67fb2e129f9224ab2a29cbbe8643f22c
-
SSDEEP
12288:CVv/egbb/Br7z2U5dbcOfUjWh9LUXqvLb:CVvGgvJCKNcOfUjWhGqvP
Malware Config
Signatures
Files
-
332ce7d1f6a7fe0e1e1e50f442d5af7556bec27f5bef17ae02ecaba52418fc6e.exe windows x86
a905438294ee9a27ea243683963ec831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAEnumNetworkEvents
accept
htonl
connect
recv
setsockopt
socket
htons
WSAWaitForMultipleEvents
gethostbyname
ntohs
inet_ntoa
sendto
recvfrom
inet_addr
__WSAFDIsSet
select
ioctlsocket
gethostname
WSAStartup
getpeername
WSAJoinLeaf
WSASocketA
bind
listen
WSACreateEvent
WSACloseEvent
WSAGetLastError
send
ntohl
WSAEventSelect
closesocket
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetFilePointer
InterlockedExchange
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MoveFileExA
Sleep
MultiByteToWideChar
CreateEventA
CloseHandle
SetEvent
GetTickCount
WaitForSingleObject
GetTempPathA
GetPrivateProfileStringA
WritePrivateProfileStringA
InterlockedDecrement
QueryPerformanceCounter
GetSystemTime
InterlockedIncrement
CopyFileA
CreateSemaphoreA
OpenSemaphoreA
MoveFileA
LocalFree
LocalAlloc
GetSystemDirectoryA
GetVersionExA
GetModuleFileNameA
GetLocalTime
WideCharToMultiByte
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
GetDiskFreeSpaceExA
GetLastError
GetLogicalDriveStringsA
TerminateProcess
ReadFile
PeekNamedPipe
GetWindowsDirectoryA
GetStartupInfoA
CreatePipe
GetProcAddress
LoadLibraryA
lstrlenA
lstrlenW
RtlUnwind
GetFileType
CreateFileA
CreateDirectoryA
DeleteFileA
FlushFileBuffers
WriteFile
HeapSize
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CreateDirectoryW
CreateFileW
GetTimeZoneInformation
GetSystemTimeAsFileTime
RaiseException
ExitProcess
GetCurrentProcess
GetModuleHandleA
GetCommandLineA
GetVersion
HeapFree
GetCurrentThreadId
TlsAlloc
SetLastError
SetStdHandle
SetEndOfFile
SetHandleCount
GetStdHandle
HeapAlloc
HeapReAlloc
FreeEnvironmentStringsA
user32
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
DispatchMessageA
advapi32
RegOpenKeyA
RegCloseKey
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoCreateGuid
oleaut32
SysStringLen
SysAllocString
VariantClear
SysFreeString
Sections
.text Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ