Static task
static1
Behavioral task
behavioral1
Sample
c2ef7627fa153131fa1903c596b9cedecf0c5e22da999a9d8d1d03ae34c7aa35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2ef7627fa153131fa1903c596b9cedecf0c5e22da999a9d8d1d03ae34c7aa35.exe
Resource
win10v2004-20221111-en
General
-
Target
c2ef7627fa153131fa1903c596b9cedecf0c5e22da999a9d8d1d03ae34c7aa35
-
Size
46KB
-
MD5
221f712f2653f6ca3eb3626d72a00620
-
SHA1
e4a41c8d0c4c0261815e22a5cd9ed498cf44eb27
-
SHA256
c2ef7627fa153131fa1903c596b9cedecf0c5e22da999a9d8d1d03ae34c7aa35
-
SHA512
1e55ffdfcd45875e925009759819c975eadf14e140f1487fa37391fbda5e8c3d0ee8f21822f01f226c8bf35c3a3b7c212299cb2f71583b3b71ab1f1a70f8e1b9
-
SSDEEP
768:0zLcRHBPTPhmi/keHrgrvYrjIHbGwZyRnCT:0vcPkiTHrzrjIHSMyRn
Malware Config
Signatures
Files
-
c2ef7627fa153131fa1903c596b9cedecf0c5e22da999a9d8d1d03ae34c7aa35.exe windows x86
1f783846e0e626c1a23b1d595f0c6808
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostname
inet_ntoa
WSACleanup
WSAStartup
gethostbyname
socket
htons
ioctlsocket
connect
select
send
closesocket
advapi32
OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService
OpenSCManagerA
kernel32
ExitProcess
lstrcatA
CreateThread
CreateProcessA
GetTempPathA
GetLastError
CreateMutexA
WaitForSingleObject
Sleep
CreateFileA
WriteFile
lstrcpyA
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
HeapAlloc
GetCPInfo
FlushFileBuffers
Sections
.text_01 Size: 44KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data_01 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE