Static task
static1
Behavioral task
behavioral1
Sample
a6683f8bdff98fbad30a93ec359f259be7720a538c8f2bacba5b54bc6f0421e2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a6683f8bdff98fbad30a93ec359f259be7720a538c8f2bacba5b54bc6f0421e2.exe
Resource
win10v2004-20220901-en
General
-
Target
a6683f8bdff98fbad30a93ec359f259be7720a538c8f2bacba5b54bc6f0421e2
-
Size
232KB
-
MD5
b85e72ebfb21121fa900b4046ddf87eb
-
SHA1
a297d897f2f4ea4ac2758e206a659ec2b3390d2f
-
SHA256
a6683f8bdff98fbad30a93ec359f259be7720a538c8f2bacba5b54bc6f0421e2
-
SHA512
8ef003baab75e97b61bf6280dbf677d0ab6b96625aa7fcee1bf54d12e99b843f84771416bbf0f5e87f79faaba35f4c7a00ed299b96ee2d36d7a91c84a5b1253c
-
SSDEEP
6144:CG4vcYI6tt495d4R2PjDz/eSDmmB7g3Y0CcHvopDb89Prj3Wi:pDYrte5d9jDz/eSDdBgo0CcP6k9337
Malware Config
Signatures
Files
-
a6683f8bdff98fbad30a93ec359f259be7720a538c8f2bacba5b54bc6f0421e2.exe windows x86
feb7af11c8e3c58ce1f38de528cc28c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
memcpy
strlen
strcpy
malloc
free
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
lstrcmpA
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
WideCharToMultiByte
HeapAlloc
HeapFree
WriteFile
ReadFile
SetFilePointer
HeapReAlloc
CreateFileA
user32
CallWindowProcA
wsock32
closesocket
WSACleanup
WSAStartup
Sections
.code Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE