Static task
static1
Behavioral task
behavioral1
Sample
24a9e2e65fa6729930bf37b9a7f8b34303cb22d30a396efbc65bd0993a681e34.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
24a9e2e65fa6729930bf37b9a7f8b34303cb22d30a396efbc65bd0993a681e34.exe
Resource
win10v2004-20221111-en
General
-
Target
24a9e2e65fa6729930bf37b9a7f8b34303cb22d30a396efbc65bd0993a681e34
-
Size
58KB
-
MD5
3166ffd2e501b5b13e3ac9f34923aebd
-
SHA1
01d81d0df6553e6e1c726280145388ac5f6faf00
-
SHA256
24a9e2e65fa6729930bf37b9a7f8b34303cb22d30a396efbc65bd0993a681e34
-
SHA512
4b27d1e71b0964c2af67bd4603e05b16220bad004031bdedaa61d991ec23d62c4adc3add4fbec8bced334e4137163a6969371fb41b21f9303458d5314280e657
-
SSDEEP
1536:RwOIT8QxVgKb2nsAX1MXWLb+Qlzsicqwyyu:ijZ2sAFMXC3zBcqVy
Malware Config
Signatures
Files
-
24a9e2e65fa6729930bf37b9a7f8b34303cb22d30a396efbc65bd0993a681e34.exe windows x86
c9f6304b1861834f627ad2aba2a9a8e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
traffic
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcSetFlowA
TcSetFlowA
kernel32
VirtualAllocEx
GetSystemDirectoryA
TlsFree
GetDiskFreeSpaceW
CreateFileA
GetThreadTimes
ReadFile
GetACP
TlsFree
TlsFree
ReplaceFileA
IsProcessInJob
GlobalFree
DeleteAtom
CreatePipe
DuplicateHandle
EncodePointer
GlobalFree
DeleteAtom
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
AllocConsole
GetThreadTimes
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
Sections
.text Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE