Static task
static1
Behavioral task
behavioral1
Sample
cd13c9fd375367dbb160568addb7a7c59faa1c98ef91f0ab68621fc48fd6cad1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd13c9fd375367dbb160568addb7a7c59faa1c98ef91f0ab68621fc48fd6cad1.exe
Resource
win10v2004-20221111-en
General
-
Target
cd13c9fd375367dbb160568addb7a7c59faa1c98ef91f0ab68621fc48fd6cad1
-
Size
44KB
-
MD5
f495d3f2d93b9f60a2bec59e8e90c126
-
SHA1
2d169d85ce09d1132a82e10f6f30cf6816cbb3f3
-
SHA256
cd13c9fd375367dbb160568addb7a7c59faa1c98ef91f0ab68621fc48fd6cad1
-
SHA512
43a11bf4d16460d0a81dd3d59d4b21606f527e6775327d72a4cd4fd902331ec26f4b24047b4309a742d0848b2179bdbe02ef64a62c25f3d268fabf655d2be132
-
SSDEEP
384:8OjuiN9EsKgc88lAwKR7YSyaeIoP2p/GZCVwQnPBFEosA+oRbZ3G0mq:8OjnNtNp8lAASgAGgdFbL+oO
Malware Config
Signatures
Files
-
cd13c9fd375367dbb160568addb7a7c59faa1c98ef91f0ab68621fc48fd6cad1.exe windows x86
e9c60ade104be2f2036a3f4cc4ec3d1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetLastError
CloseHandle
GetModuleFileNameA
Sleep
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
HeapReAlloc
VirtualAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
SetFilePointer
GetStringTypeW
advapi32
RegCreateKeyA
RegSetValueExA
ws2_32
WSAGetLastError
setsockopt
sendto
inet_addr
WSAStartup
socket
gethostbyname
htons
connect
send
recv
closesocket
WSACleanup
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE