Static task
static1
Behavioral task
behavioral1
Sample
93e2e9accc4aeaa46784b57c7369878c77c888090dbdab2e5ad2bc0c30212206.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93e2e9accc4aeaa46784b57c7369878c77c888090dbdab2e5ad2bc0c30212206.exe
Resource
win10v2004-20221111-en
General
-
Target
93e2e9accc4aeaa46784b57c7369878c77c888090dbdab2e5ad2bc0c30212206
-
Size
34KB
-
MD5
b20d3bf5fa333eea2fa7f1fcf6df628d
-
SHA1
3e9e4f8e4f1cd9f0582acfdfb3556bd587149d47
-
SHA256
93e2e9accc4aeaa46784b57c7369878c77c888090dbdab2e5ad2bc0c30212206
-
SHA512
95185c362d8c869bd6478ae6afe4870bce57be2bf41d87df1e7598b7b86dd481d54f3649bfcf9fba744dfd40eac5eb35660dbc29b1947b5eb141313944f99e09
-
SSDEEP
768:aBDNw6eGid7TfDDQd+KwmVH1FFCJmE3SFE:Z6liJ0dnLFqZL
Malware Config
Signatures
Files
-
93e2e9accc4aeaa46784b57c7369878c77c888090dbdab2e5ad2bc0c30212206.exe windows x86
a6b8e21d58718684b27b481cf56b25fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
VirtualAlloc
WideCharToMultiByte
DeleteCriticalSection
AllocConsole
GetSystemTimeAsFileTime
GetConsoleCP
CreateFileW
SetUnhandledExceptionFilter
CreateMutexW
DeactivateActCtx
DeleteTimerQueue
CreateMemoryResourceNotification
TerminateProcess
LeaveCriticalSection
ExitThread
CancelIo
BeginUpdateResourceW
GetCurrentProcessId
CloseHandle
GetLastError
CancelTimerQueueTimer
FatalExit
Sleep
CopyFileA
GetCurrentProcess
GetCurrentThreadId
ClearCommBreak
EnumDateFormatsExW
GetConsoleNlsMode
ws2_32
WSAStartup
bind
WSACleanup
listen
socket
send
connect
accept
recv
closesocket
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ