Static task
static1
Behavioral task
behavioral1
Sample
ae6412dba3f2417edc21929121894c7d1e5534e94035db41e9d410266067e672.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae6412dba3f2417edc21929121894c7d1e5534e94035db41e9d410266067e672.exe
Resource
win10v2004-20221111-en
General
-
Target
ae6412dba3f2417edc21929121894c7d1e5534e94035db41e9d410266067e672
-
Size
117KB
-
MD5
9a41da4754eb446ed736e6e9c86e0012
-
SHA1
f2d58450689476f542b3d15b6cfddbeee802ba82
-
SHA256
ae6412dba3f2417edc21929121894c7d1e5534e94035db41e9d410266067e672
-
SHA512
7cd158ce65c030b9ed87ff2650e49052c2c6304c2d43412f8eb216602a9e7a4c7b11a755e46d7a50473ce32d0c9eb3a01f83627e495ae55e57e79076ffb71950
-
SSDEEP
3072:7CDJtwxj1a/op3CGZDUAq63vdLO5G0MT3A2R5JwJOr:7CDJt88S19J3Wp4A2y4
Malware Config
Signatures
Files
-
ae6412dba3f2417edc21929121894c7d1e5534e94035db41e9d410266067e672.exe windows x86
f89977efe59ae62e880dac94cac4c980
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleOutputCP
CloseHandle
GetStdHandle
ReadFile
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
WriteConsoleOutputA
WriteConsoleInputA
WriteConsoleA
GetVersion
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
ole32
CoUninitialize
CoInitialize
CLSIDFromString
CoRegisterClassObject
ws2_32
htons
WSAStartup
WSACleanup
send
getsockopt
htonl
getservbyname
inet_addr
ntohs
recv
recvfrom
socket
msvcrt
_exit
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_except_handler3
_XcptFilter
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ