Static task
static1
Behavioral task
behavioral1
Sample
bd54a3827f90f5afc6fcb5d5bf04773d504166d3b9aeecfe030a8dcf9d8b88b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd54a3827f90f5afc6fcb5d5bf04773d504166d3b9aeecfe030a8dcf9d8b88b1.exe
Resource
win10v2004-20220812-en
General
-
Target
bd54a3827f90f5afc6fcb5d5bf04773d504166d3b9aeecfe030a8dcf9d8b88b1
-
Size
124KB
-
MD5
09959d9cb5a562193c1a83cc49862ad0
-
SHA1
70182caebcaaab99dabc4cc825d8be6e65de36f2
-
SHA256
bd54a3827f90f5afc6fcb5d5bf04773d504166d3b9aeecfe030a8dcf9d8b88b1
-
SHA512
c547760b113c3ec3ee8f5b22e242d5e555eb74fb025267da239cf965757142b7f25f71a59cfb0103033582982fce53c5ca0a795327609b3267bd972a7a2a240c
-
SSDEEP
3072:Iw+jCUPxtjAyKuTBfAdzfKQUn0F2WG1zrXxnlLXhfh:InkyKuTBazCq2WWzVh
Malware Config
Signatures
Files
-
bd54a3827f90f5afc6fcb5d5bf04773d504166d3b9aeecfe030a8dcf9d8b88b1.exe windows x86
c6247c8ef89061463c059e34e65db2f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostMessageA
ws2_32
recv
send
gethostname
socket
setsockopt
htons
WSACleanup
WSAStartup
connect
gethostbyname
WSAGetLastError
closesocket
msvcp60
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
msvcrt
islower
strcpy
rand
time
malloc
free
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcat
sscanf
memcpy
memset
strlen
__CxxFrameHandler
srand
memchr
_snprintf
??2@YAPAXI@Z
shell32
ShellExecuteA
netapi32
Netbios
kernel32
CreateThread
WaitForSingleObject
GetLocalTime
GetWindowsDirectoryA
SetFilePointer
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
SetEndOfFile
ReadFile
GetStartupInfoA
GetModuleHandleA
OutputDebugStringA
CloseHandle
CreateFileA
GetModuleFileNameA
Sleep
WriteFile
imagehlp
MakeSureDirectoryPathExists
shlwapi
PathFileExistsA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE