Static task
static1
Behavioral task
behavioral1
Sample
6576309ae8103f5526cdd6503c7acca0f066d8777ab53a85a330a513472c9240.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6576309ae8103f5526cdd6503c7acca0f066d8777ab53a85a330a513472c9240.exe
Resource
win10v2004-20220812-en
General
-
Target
6576309ae8103f5526cdd6503c7acca0f066d8777ab53a85a330a513472c9240
-
Size
173KB
-
MD5
94210447777c8bbbac1292eb563c7892
-
SHA1
8de53e8fe91f9d3fcf40523efbbb4cd97e89cafb
-
SHA256
6576309ae8103f5526cdd6503c7acca0f066d8777ab53a85a330a513472c9240
-
SHA512
8e51db59ce232b783790dfff3fe4a82a040f2746a9ef99e44bc28d2c55e603e8f80fbf16c1736bee36e826611626626444795a70b2bc8b9ff4cb13445a97d719
-
SSDEEP
3072:pihrKUJS4k9NwhkFzu4nFRa5wvOtzHL9bNVOxi2bQZ23UDVb2G4756NJdsrBnxVw:psrKGSjukRkwvONHLRNPUQZ23UwG4yJx
Malware Config
Signatures
Files
-
6576309ae8103f5526cdd6503c7acca0f066d8777ab53a85a330a513472c9240.exe windows x86
cd59672c5d961c35f3159cc5371c94a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
GetLastError
Sleep
FormatMessageA
SetThreadUILanguage
msvcrt
_c_exit
_controlfp
_except_handler3
_exit
_XcptFilter
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
strrchr
_iob
fflush
isprint
isspace
_write
__initenv
exit
_cexit
putchar
__set_app_type
ws2_32
connect
WSAStartup
gethostname
getaddrinfo
socket
WSAGetLastError
closesocket
freeaddrinfo
recv
send
user32
CharToOemBuffA
mswsock
s_perror
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 164KB - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE