Static task
static1
Behavioral task
behavioral1
Sample
79f7a5eb9379ddf6573ceb766fb8d75cd8d8a2e56f25ce58eddee1bcbb4af97e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79f7a5eb9379ddf6573ceb766fb8d75cd8d8a2e56f25ce58eddee1bcbb4af97e.exe
Resource
win10v2004-20220901-en
General
-
Target
79f7a5eb9379ddf6573ceb766fb8d75cd8d8a2e56f25ce58eddee1bcbb4af97e
-
Size
167KB
-
MD5
75a4bb32f0c21fef986fc173da1f4ecd
-
SHA1
c4bdb42e05e9097ba2ae739806f4300fa651427d
-
SHA256
79f7a5eb9379ddf6573ceb766fb8d75cd8d8a2e56f25ce58eddee1bcbb4af97e
-
SHA512
85894bf419ca4cf6ee073530d508a43b859f002cc3b7c6b1a37c6670724aa872dfd5de280b995c3131f3de1aa972ceabcd46738e586e6be89137c1c88e74d231
-
SSDEEP
3072:0LPfd85kN4bZF+WSUVwoludo+EryI2zgbXsVYQ4qiturfOnPtT34:6a5k4ZFPSUGfdoj127NZOna
Malware Config
Signatures
Files
-
79f7a5eb9379ddf6573ceb766fb8d75cd8d8a2e56f25ce58eddee1bcbb4af97e.exe windows x86
b69ff331315f98d21d1503b87fbd7059
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostname
sendto
recvfrom
kernel32
VirtualAlloc
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetModuleHandleA
GetTickCount
GetLocaleInfoA
GetSystemInfo
VirtualProtect
IsBadWritePtr
IsBadReadPtr
HeapValidate
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
FlushFileBuffers
RaiseException
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetProcessHeap
CloseHandle
FreeLibrary
VirtualQuery
InterlockedExchange
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
user32
wvsprintfA
wsprintfA
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ