Static task
static1
Behavioral task
behavioral1
Sample
c931f90758658fc414e85231458f586a765ca290b1e2272f5c1588968d5d9320.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c931f90758658fc414e85231458f586a765ca290b1e2272f5c1588968d5d9320.exe
Resource
win10v2004-20220812-en
General
-
Target
c931f90758658fc414e85231458f586a765ca290b1e2272f5c1588968d5d9320
-
Size
9KB
-
MD5
744a6ab75951b254186fad41eab867d6
-
SHA1
e6f61f200346d5840a514c208c4a3a07d150e677
-
SHA256
c931f90758658fc414e85231458f586a765ca290b1e2272f5c1588968d5d9320
-
SHA512
97d1405311b07c65d32003feadcfed76e2f2aaf2d3a6d6a874563bab97b81ecf73ffe05366ce561389b6861afc3a50f01f00ee31555e6b67ee5ae1ad54d42e1a
-
SSDEEP
192:epmlKnJiLcaU4yB2+RuzDsBdyfHsY0eYC5pd5unUoynkeC1:1lKnJqcPQ+czDGcfHsY0evaU5C
Malware Config
Signatures
Files
-
c931f90758658fc414e85231458f586a765ca290b1e2272f5c1588968d5d9320.exe windows x86
c39e0b78e5a43db8f3f86e0f08a3984a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord540
ord2846
ord2818
ord537
ord2764
ord6648
ord4129
ord2915
ord800
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
__CxxFrameHandler
strncmp
atoi
strstr
strchr
strtok
exit
kernel32
CreateProcessA
GetProcAddress
LoadLibraryA
CloseHandle
TerminateThread
GetTempPathA
GetStartupInfoA
GetModuleHandleA
GetVersionExA
GlobalMemoryStatus
CreateThread
GetSystemDirectoryA
Sleep
advapi32
DeleteService
OpenServiceA
OpenSCManagerA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ws2_32
inet_ntoa
gethostbyname
inet_addr
send
closesocket
WSAGetLastError
recv
__WSAFDIsSet
select
connect
socket
htons
WSAStartup
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE