Static task
static1
Behavioral task
behavioral1
Sample
44ef1def24eecb2e6c43d55dce603477321e5ae1fbee611c51f93ee74498738a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44ef1def24eecb2e6c43d55dce603477321e5ae1fbee611c51f93ee74498738a.exe
Resource
win10v2004-20220812-en
General
-
Target
44ef1def24eecb2e6c43d55dce603477321e5ae1fbee611c51f93ee74498738a
-
Size
48KB
-
MD5
40ac853bad0021fe192ea00cbd81b0d0
-
SHA1
c793f64c5f31e670e34c6f0ee0fe3b6725c15bf2
-
SHA256
44ef1def24eecb2e6c43d55dce603477321e5ae1fbee611c51f93ee74498738a
-
SHA512
413198fc9d12e55c68f659a28bb02adfede52cdabbd5fef0f0c88152bfe56fa2c2e49377adb13532ea8b6f55ff3945e30a8224bea0bd46dbcc84716b4a17c71c
-
SSDEEP
768:Jq+lzGCnBsNKIIBzJF1SLpuT/2b8JlFmzdt:ApAz1S9uTObq7Mt
Malware Config
Signatures
Files
-
44ef1def24eecb2e6c43d55dce603477321e5ae1fbee611c51f93ee74498738a.exe windows x86
9f77ff2c5c2ea83fd399bf2a81393e38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetEnvironmentVariableA
GetModuleFileNameA
ExitProcess
GetLastError
WaitForSingleObject
CloseHandle
CreateThread
Sleep
GetCurrentProcessId
GetTickCount
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
HeapReAlloc
VirtualAlloc
SetFilePointer
WriteFile
HeapFree
VirtualFree
HeapCreate
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
TerminateProcess
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
advapi32
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ws2_32
WSAStartup
gethostbyname
__WSAFDIsSet
recv
WSAIoctl
socket
connect
send
gethostname
inet_ntoa
select
WSASocketA
WSAGetLastError
setsockopt
htons
htonl
sendto
closesocket
WSACleanup
inet_addr
iphlpapi
GetIfTable
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE