Static task
static1
Behavioral task
behavioral1
Sample
d623fd0974a81aef4d0307ca827672ee6b9cc09cdcd659dc7ddf802604f2b78a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d623fd0974a81aef4d0307ca827672ee6b9cc09cdcd659dc7ddf802604f2b78a.exe
Resource
win10v2004-20220901-en
General
-
Target
d623fd0974a81aef4d0307ca827672ee6b9cc09cdcd659dc7ddf802604f2b78a
-
Size
221KB
-
MD5
08eb09cd2ee26bb417931596e8782c6e
-
SHA1
880e446b56722be02b0e08ad1078f68bb6cf074d
-
SHA256
d623fd0974a81aef4d0307ca827672ee6b9cc09cdcd659dc7ddf802604f2b78a
-
SHA512
f9ee306b1c6abe66d9f3ba1afae42a61aef849b038f9641f190ff5affd15818627d9804bd6eca7927ddeb6e648d815e92a6140a97ad0cf6762004db19284362b
-
SSDEEP
3072:FEMH6ew87zPYIrUUr81Lui8RVQ73HX2l8/OgCX3CTp+GeVCQvUHt:FEMH6w4IrV8163vQjLgspmxUH
Malware Config
Signatures
Files
-
d623fd0974a81aef4d0307ca827672ee6b9cc09cdcd659dc7ddf802604f2b78a.exe windows x86
da2ac38c67dd1813f0c52d38c208a786
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
send
recv
WSACleanup
closesocket
WSAStartup
gethostname
setsockopt
connect
shutdown
htons
ioctlsocket
gethostbyname
socket
kernel32
LockResource
LoadResource
SizeofResource
WaitForSingleObject
GetFileAttributesA
GetShortPathNameA
FindResourceExA
GetWindowsDirectoryA
GetModuleFileNameA
GetDiskFreeSpaceA
WritePrivateProfileStringA
GetPrivateProfileStringA
CopyFileA
TerminateThread
CreateThread
DeleteFileA
FindFirstFileA
CloseHandle
ReleaseMutex
GetStringTypeA
OutputDebugStringA
GetTempPathA
CreateDirectoryA
MultiByteToWideChar
RemoveDirectoryA
FindClose
Sleep
SetCurrentDirectoryA
GetFileSize
CreateFileA
CreateProcessA
SetStdHandle
VirtualAlloc
LCMapStringA
LCMapStringW
LoadLibraryA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
RtlUnwind
GetLastError
GetStringTypeW
CreateMutexA
FindNextFileA
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
WideCharToMultiByte
FlushFileBuffers
WriteFile
UnhandledExceptionFilter
GetFileType
GetStdHandle
HeapAlloc
HeapFree
SetFilePointer
SetHandleCount
VirtualFree
GetCurrentProcess
TerminateProcess
ExitProcess
ReadFile
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetACP
GetOEMCP
HeapDestroy
HeapCreate
user32
SetTimer
MessageBoxA
DdeDisconnect
PostMessageA
SendMessageA
LoadCursorA
SetForegroundWindow
SetFocus
EndDialog
SetCursor
GetDlgItemTextA
InvalidateRect
EnableWindow
SetDlgItemTextA
GetWindowRect
MapWindowPoints
SetActiveWindow
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
GetClassNameA
FindWindowA
DdeUninitialize
GetDesktopWindow
SetWindowTextA
EnumWindows
KillTimer
GetDC
DialogBoxParamA
GetDlgItem
LoadIconA
SendDlgItemMessageA
GetParent
GetWindowTextA
LoadBitmapA
DdeFreeStringHandle
gdi32
DeleteObject
SetDIBitsToDevice
CreatePalette
SelectPalette
RealizePalette
advapi32
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ