Static task
static1
Behavioral task
behavioral1
Sample
d10acff9ee880367cb8d01c53e247dd8f19ddc1e9299a81a40ce795dfb3411d3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d10acff9ee880367cb8d01c53e247dd8f19ddc1e9299a81a40ce795dfb3411d3.exe
Resource
win10v2004-20221111-en
General
-
Target
d10acff9ee880367cb8d01c53e247dd8f19ddc1e9299a81a40ce795dfb3411d3
-
Size
96KB
-
MD5
138d351cbc286a1b2f752c968cc6461b
-
SHA1
53c27d0f7d225665534241fcaad8f8ea178bc218
-
SHA256
d10acff9ee880367cb8d01c53e247dd8f19ddc1e9299a81a40ce795dfb3411d3
-
SHA512
fe1f79ee12bad1c50f258622f989c84aefa860102308094227da73598e65bfc4ffd8710bd047af52f4841693d7fa90f7d6be8d4bbb82412bb87a52ff651a11a4
-
SSDEEP
1536:kBn+F+/pvyvJKe5zzN1Kt1RkSs1UfycBjAYn1fpghYjDJ:kB+U/pvyvJjtKeXea610Yx
Malware Config
Signatures
Files
-
d10acff9ee880367cb8d01c53e247dd8f19ddc1e9299a81a40ce795dfb3411d3.exe windows x86
2d07b8a4d02d06c6d33e155dde6c1279
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
inet_addr
gethostbyaddr
WSAGetLastError
recv
socket
connect
closesocket
send
kernel32
LoadLibraryA
TerminateThread
GetSystemTime
ExitProcess
lstrlenA
MultiByteToWideChar
Sleep
GetProcAddress
advapi32
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
oleaut32
SysAllocStringLen
SysFreeString
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ