Static task
static1
Behavioral task
behavioral1
Sample
c93890d303ac96a103495bdb291f5dd027de12bd9410a5ca04df61c36a1184ab.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c93890d303ac96a103495bdb291f5dd027de12bd9410a5ca04df61c36a1184ab.exe
Resource
win10v2004-20221111-en
General
-
Target
c93890d303ac96a103495bdb291f5dd027de12bd9410a5ca04df61c36a1184ab
-
Size
531KB
-
MD5
cbfed87419bfd13f17b2b0fdbf192f97
-
SHA1
42bd293966dee58e97dbfd59e827c0707f5d5766
-
SHA256
c93890d303ac96a103495bdb291f5dd027de12bd9410a5ca04df61c36a1184ab
-
SHA512
86a784a52f6efc705acc5e6d2b3269b5f5752831168c7b1424b3ea306bbadad02189ac1e241534fd65a0dc63d12b101e1284f0b8682998c77da5f2aa9f4a1b9e
-
SSDEEP
6144:m7ao0YgcPL4DYaKlbATLVK5XzivTftymRtSjwTgiyvCUi4jPSRGn+Un3S3Zanomv:0aXD0cbryvZCGnx3SpEolIlX/C8WTwZ
Malware Config
Signatures
Files
-
c93890d303ac96a103495bdb291f5dd027de12bd9410a5ca04df61c36a1184ab.exe windows x86
9007afa0a2d49c9a271abbff36555fc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgA
PageSetupDlgW
FindTextA
GetFileTitleW
GetOpenFileNameW
wsock32
listen
WSAAsyncGetServByName
shutdown
ord1114
getprotobynumber
WSAGetLastError
WSAAsyncGetHostByName
bind
WSAAsyncGetServByPort
WSAStartup
ord1110
ord1142
WSAUnhookBlockingHook
getsockname
ord1118
ord1130
ord1140
ioctlsocket
gethostbyname
getsockopt
inet_addr
recvfrom
gethostbyaddr
socket
ord1112
setsockopt
recv
WSAAsyncGetProtoByName
inet_ntoa
WSASetBlockingHook
ord1111
htonl
WSAAsyncGetHostByAddr
ntohl
WSACancelBlockingCall
WSACancelAsyncRequest
ntohs
ord1106
ord1116
ord1120
__WSAFDIsSet
getprotobyname
ord1119
closesocket
ord1000
accept
WSACleanup
select
getservbyport
ord1141
getservbyname
getpeername
ord1115
ord1107
ord1109
connect
gdi32
CreatePenIndirect
FixBrushOrgEx
SetDIBitsToDevice
GetCharacterPlacementW
CreateBitmapIndirect
GetTextColor
CreateFontA
GetCharABCWidthsA
ColorCorrectPalette
TextOutA
GetObjectType
UpdateColors
CopyMetaFileA
AbortPath
SetFontEnumeration
EnumFontFamiliesExW
FloodFill
DrawEscape
RoundRect
SelectObject
EnumFontFamiliesA
EnumObjects
FrameRgn
CheckColorsInGamut
GetBitmapBits
EnumEnhMetaFile
SetBkColor
TextOutW
CreatePolyPolygonRgn
GetObjectW
SelectClipRgn
ModifyWorldTransform
CreateRoundRectRgn
GetNearestPaletteIndex
CreateDIBitmap
SetROP2
CombineTransform
RemoveFontResourceA
gdiPlaySpoolStream
PolyPolyline
GetTextFaceA
StartDocA
SetPolyFillMode
SetTextCharacterExtra
EndPath
SetTextAlign
ArcTo
CloseMetaFile
ExtTextOutA
GetClipBox
Polyline
GetCharABCWidthsW
AddFontResourceW
WidenPath
SetBitmapBits
GetDeviceCaps
GetPolyFillMode
DeviceCapabilitiesExA
CreateDCA
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE