Static task
static1
Behavioral task
behavioral1
Sample
abf247ac8f6aad9b781088145999ec81db797055198d114132f5ddf38fe8225c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
abf247ac8f6aad9b781088145999ec81db797055198d114132f5ddf38fe8225c.exe
Resource
win10v2004-20220812-en
General
-
Target
abf247ac8f6aad9b781088145999ec81db797055198d114132f5ddf38fe8225c
-
Size
300KB
-
MD5
6f7e54ecf844eb40b26285b37e961867
-
SHA1
f2597a9ae5845c264513e7b66cd01485501dbd17
-
SHA256
abf247ac8f6aad9b781088145999ec81db797055198d114132f5ddf38fe8225c
-
SHA512
3cbb59eac40b6c9f7dcccd8f861f9d0ff3788fb2624bced4bd5aecd2a5db9b8c607bab5f8de668e60b7267f243f57d52fc0aa19b19c0f9301e9b838a372f2565
-
SSDEEP
6144:Yaf3mbuBNe5CVXoXtUmJJYifFwYtQMWMA2WXERdLA0l4SiqPTCM:/f3SQQoV6RJYifFwCW2WqdLA0l73b/
Malware Config
Signatures
Files
-
abf247ac8f6aad9b781088145999ec81db797055198d114132f5ddf38fe8225c.exe windows x86
ddf7713001481c48c7d38bd82ba75adb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
ntohs
recv
gethostbyname
send
inet_ntoa
listen
WSAStartup
WSAGetLastError
bind
getservbyname
htons
ntohl
setsockopt
shutdown
htonl
connect
WSACancelBlockingCall
closesocket
getsockopt
WSACleanup
WSASetLastError
accept
socket
user32
MessageBoxIndirectA
UpdateWindow
kernel32
FlushConsoleInputBuffer
CloseHandle
FreeLibrary
GetStdHandle
SetLastError
GetCurrentThreadId
GetThreadTimes
GetFileType
GlobalMemoryStatus
GetCurrentProcess
VirtualAllocEx
gdi32
BitBlt
CreateCompatibleDC
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleBitmap
GetBitmapBits
SelectObject
GetObjectA
GetDeviceCaps
comctl32
CreateStatusWindow
ImageList_GetImageRect
CreateToolbar
InitMUILanguage
ImageList_Read
CreateToolbarEx
ImageList_SetFlags
ImageList_DrawIndirect
serialui
drvSetDefaultCommConfigW
drvSetDefaultCommConfigA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 39KB - Virtual size: 675KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 176KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 659KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ