Static task
static1
Behavioral task
behavioral1
Sample
c20d52b5008be53bd1b9fbbaf5c697ead2c906d688942eac9656a46a350154ac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c20d52b5008be53bd1b9fbbaf5c697ead2c906d688942eac9656a46a350154ac.exe
Resource
win10v2004-20221111-en
General
-
Target
c20d52b5008be53bd1b9fbbaf5c697ead2c906d688942eac9656a46a350154ac
-
Size
48KB
-
MD5
aedfc212525fa9e41c349e73548309ee
-
SHA1
23a1d0fc3e5e37f9b571b30bdf4b7ce829ff8a77
-
SHA256
c20d52b5008be53bd1b9fbbaf5c697ead2c906d688942eac9656a46a350154ac
-
SHA512
6ac90cf821b9538c54a72b784666858210f8cf6960424a21c733c7d3fcf006ab30bf816a0ff83a075b6512b0bb223dbf2e30603a54acadc8db73b724a883ea5f
-
SSDEEP
768:mRPyXHuttc8Yrsh8LhrLZugIvmSHrHglg5:m8HAtc8YDLhrLivmSHcl
Malware Config
Signatures
Files
-
c20d52b5008be53bd1b9fbbaf5c697ead2c906d688942eac9656a46a350154ac.exe windows x86
feaa59a4c8b2c30ab928459480196043
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
recv
send
closesocket
connect
htons
getservbyname
socket
gethostbyaddr
gethostbyname
ioctlsocket
WSACleanup
WSAStartup
kernel32
GetEnvironmentStringsW
SetEndOfFile
HeapSize
LCMapStringW
LCMapStringA
GetLocaleInfoA
InterlockedExchange
RtlUnwind
LoadLibraryA
GetStringTypeW
GetStringTypeA
VirtualQuery
GetSystemInfo
VirtualProtect
Sleep
GetVolumeInformationA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
WideCharToMultiByte
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
HeapFree
CloseHandle
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
ReadFile
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
HeapAlloc
CompareStringA
MultiByteToWideChar
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
CreateFileA
FlushFileBuffers
VirtualAlloc
HeapReAlloc
SetStdHandle
QueryPerformanceCounter
shell32
ShellExecuteA
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE