Static task
static1
Behavioral task
behavioral1
Sample
af5b5d4120edf969958317bfc7f65d8823deabfed403feed2b10cc6d3562606d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af5b5d4120edf969958317bfc7f65d8823deabfed403feed2b10cc6d3562606d.exe
Resource
win10v2004-20220812-en
General
-
Target
af5b5d4120edf969958317bfc7f65d8823deabfed403feed2b10cc6d3562606d
-
Size
286KB
-
MD5
b8efa4302a2b99320c22abcdc1643539
-
SHA1
98863c74cf66e1e18fdf2aa94dc8ce3b010b2dfe
-
SHA256
af5b5d4120edf969958317bfc7f65d8823deabfed403feed2b10cc6d3562606d
-
SHA512
5df78334b0a9a6a7b24a740295d398396d3c27d7df7f7660f9b61ddfc1d5405176b0c3f97395343745ad37d72820a673b4a0728648640e487e5dcbd8e6b245e8
-
SSDEEP
6144:GiKol9wG8Xndlj3eCgyJ6eI5RHzCOdkQte:jKQ998XndlzeQ/IDHzRkQte
Malware Config
Signatures
Files
-
af5b5d4120edf969958317bfc7f65d8823deabfed403feed2b10cc6d3562606d.exe windows x86
44acb762461e5564783f45d4e45f0a41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxIndirectA
gdi32
GetDeviceCaps
BitBlt
DeleteDC
SelectObject
CreateCompatibleBitmap
GetObjectA
DeleteObject
GetBitmapBits
CreateCompatibleDC
CreateDCA
kernel32
SetLastError
GlobalMemoryStatus
FreeLibrary
CloseHandle
GetFileType
FlushConsoleInputBuffer
GetThreadTimes
GetCurrentThreadId
GetStdHandle
HeapCreate
VirtualAllocEx
wsock32
recv
ntohs
setsockopt
WSACancelBlockingCall
WSACleanup
getservbyname
gethostbyname
ntohl
inet_ntoa
WSASetLastError
accept
htons
listen
bind
connect
getsockopt
WSAStartup
WSAGetLastError
closesocket
htonl
send
shutdown
socket
atmlib
ATMFinish
ATMGetNtmFields
ATMMakePSS
ATMGetFontInfo
ATMGetVersion
ATMFontSelected
ATMGetVersionExW
atl
AtlModuleRevokeClassObjects
DllCanUnloadNow
AtlAxDialogBoxA
AtlModuleTerm
AtlWaitWithMessageLoop
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 268KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ