Static task
static1
Behavioral task
behavioral1
Sample
ae12fd6d4045a9c3354a32e84a9fde4e5270459afb8d2b591e7a3755fe5981ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae12fd6d4045a9c3354a32e84a9fde4e5270459afb8d2b591e7a3755fe5981ab.exe
Resource
win10v2004-20221111-en
General
-
Target
ae12fd6d4045a9c3354a32e84a9fde4e5270459afb8d2b591e7a3755fe5981ab
-
Size
104KB
-
MD5
f8cc4e64706777fd03a828f0b9254667
-
SHA1
c84fa0401c546f81f27adf518bdee1956b36137f
-
SHA256
ae12fd6d4045a9c3354a32e84a9fde4e5270459afb8d2b591e7a3755fe5981ab
-
SHA512
443bef8f0f10e353725183be0c70b73d236c5befc394d146751e5a44ae267e56103d8f3aea7ae85af027fad8bca11ac984a428e77093608ff7e665ce889629b7
-
SSDEEP
384:uwxApqtw2EhUfuVGu1Ngq2yN3Xfbv9557bbwrZn1BZ:uGhw2ECaG+N2yN/T9557bKDZ
Malware Config
Signatures
Files
-
ae12fd6d4045a9c3354a32e84a9fde4e5270459afb8d2b591e7a3755fe5981ab.exe windows x86
be6707e3f8aaefbe05b292c390cb94b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atoi
_chkesp
strncpy
strlen
strncat
printf
_vsnprintf
strstr
strcmp
strtok
srand
rand
_ftol
strchr
strcat
ws2_32
recv
WSAStartup
gethostbyname
inet_addr
connect
htons
socket
listen
bind
send
ntohs
inet_ntoa
getsockname
getpeername
closesocket
kernel32
QueryPerformanceFrequency
FreeLibrary
TerminateThread
CreateThread
SetThreadPriority
GetCurrentProcess
SetProcessWorkingSetSize
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
ReleaseSemaphore
CloseHandle
GetStdHandle
SetConsoleTextAttribute
GetCommandLineA
CreateSemaphoreA
GetModuleHandleA
GetModuleFileNameA
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetSystemDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
CopyFileA
GetLastError
Sleep
ExitProcess
QueryPerformanceCounter
GetTickCount
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 943B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 710B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 995B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ