Static task
static1
Behavioral task
behavioral1
Sample
c13de5ba03c02ea1a44aa7fd7af2989b94669c9715ce0e1447a271417a58cfed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c13de5ba03c02ea1a44aa7fd7af2989b94669c9715ce0e1447a271417a58cfed.exe
Resource
win10v2004-20221111-en
General
-
Target
c13de5ba03c02ea1a44aa7fd7af2989b94669c9715ce0e1447a271417a58cfed
-
Size
45KB
-
MD5
199a984c4027236c6650952650b8b917
-
SHA1
24a279ea7aacdf2fdfb6a419ae87e2ad59e416fe
-
SHA256
c13de5ba03c02ea1a44aa7fd7af2989b94669c9715ce0e1447a271417a58cfed
-
SHA512
112893ea8475d2eddc42f8375ba295bbe161a7050b2b1879ca89c17fe62bf1da6dd4603aad1067766ebd8fcd7b133dc1ae10a095aa63039716b953722a71258a
-
SSDEEP
768:F/OVQ0AMfQJm7QOGimF4trPLc4Ik0h9cqqWDdzyxezLn2f4VGNDrS2Udax:JOVQGQE7ZGim4TLqSWDVy8zcSGNDrpUw
Malware Config
Signatures
Files
-
c13de5ba03c02ea1a44aa7fd7af2989b94669c9715ce0e1447a271417a58cfed.exe windows x86
a9dfa15135fcd2cc7003b468a90b8bef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_ftime
_strdup
_strnicmp
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_beginthreadex
_cexit
_iob
_isctype
_onexit
_pctype
_setmode
atexit
atoi
fclose
fflush
fopen
fprintf
free
fseek
gmtime
localtime
malloc
memcpy
memmove
memset
perror
rand
realloc
signal
sprintf
srand
sscanf
strchr
strcpy
strerror
strlen
strrchr
strstr
system
time
kernel32
CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeConsole
GetCurrentProcessId
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
ws2_32
WSAAccept
WSAGetLastError
WSASocketA
WSAStartup
__WSAFDIsSet
bind
closesocket
connect
gethostbyname
getpeername
getsockname
htonl
htons
ioctlsocket
listen
ntohl
ntohs
recvfrom
select
send
sendto
setsockopt
shutdown
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 80B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE