Static task
static1
Behavioral task
behavioral1
Sample
8728cd673e4f22cf34c5e9a8acfe30a2fb7b4b8d9888e8cc7aafa55f09e49486.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8728cd673e4f22cf34c5e9a8acfe30a2fb7b4b8d9888e8cc7aafa55f09e49486.exe
Resource
win10v2004-20220812-en
General
-
Target
8728cd673e4f22cf34c5e9a8acfe30a2fb7b4b8d9888e8cc7aafa55f09e49486
-
Size
348KB
-
MD5
bc19aaeeb80174c85ec29079e2a3052d
-
SHA1
dc9891d1d03f0924d14266beafa72bef5fcb95a4
-
SHA256
8728cd673e4f22cf34c5e9a8acfe30a2fb7b4b8d9888e8cc7aafa55f09e49486
-
SHA512
bb0d71dcab17bd4f64eea65ccd75cec4917c1c9e45c69a9c2824ee966dc7c96d2ea90e673e82b6bfc92aaadacf3f00cb0a2532cf58f7cf3394830d364527ba76
-
SSDEEP
6144:LJ4njqsyJe0iVZsQD3biz94/pw8nFK7tv5Lqps9sUUc6sPUfJ:LmaiVB3baPT7tv5mps/Uc6Xx
Malware Config
Signatures
Files
-
8728cd673e4f22cf34c5e9a8acfe30a2fb7b4b8d9888e8cc7aafa55f09e49486.exe windows x86
f2613be9335bf616085cd9236dd6f936
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateMutexA
GetLastError
RtlZeroMemory
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
lstrlenA
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
FlushFileBuffers
CloseHandle
GetTickCount
ReleaseMutex
FreeLibrary
ExitProcess
TerminateThread
TerminateProcess
CreateThread
ExitThread
GetSystemTime
GetDateFormatA
GetTimeFormatA
GetSystemDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetFileSize
ReadFile
advapi32
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptDecrypt
CryptDestroyKey
ws2_32
WSACleanup
listen
accept
shutdown
closesocket
recv
send
WSAStartup
htons
socket
bind
dnsapi
DnsFlushResolverCache
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ