Static task
static1
Behavioral task
behavioral1
Sample
eff16a8477c55b3a039f6911edc1549c288609ac10f7ecf54a042cbecca6a408.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eff16a8477c55b3a039f6911edc1549c288609ac10f7ecf54a042cbecca6a408.exe
Resource
win10v2004-20221111-en
General
-
Target
eff16a8477c55b3a039f6911edc1549c288609ac10f7ecf54a042cbecca6a408
-
Size
4KB
-
MD5
4c5f10cd0caefaabf1c00b674c81948a
-
SHA1
a892a5b3ebca34221bb412b71f20a635145ceeca
-
SHA256
eff16a8477c55b3a039f6911edc1549c288609ac10f7ecf54a042cbecca6a408
-
SHA512
1759d9a5a2da07aa9e73d32471bdb8ca84d74df3164e7ab041eb7c91d57434d4f5dbe24a598131316d07cf46c70582d311c3dd88a40817fdd8af4ab049916616
-
SSDEEP
48:6Dse5cd4FWBr4vqhqd+TNJRVe8cm2a0Xs2MRdatNatBrVJWpy:4Mr4vqhqcTbp+alRYQE
Malware Config
Signatures
Files
-
eff16a8477c55b3a039f6911edc1549c288609ac10f7ecf54a042cbecca6a408.exe windows x86
39dc755c1b1c0a6d8163fbb02856fe14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineA
GetExitCodeProcess
GetStartupInfoA
PeekNamedPipe
CreateProcessA
WriteFile
lstrcmpA
lstrlenA
CloseHandle
CreatePipe
ReadFile
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
wsock32
WSACleanup
WSAStartup
accept
bind
closesocket
htons
listen
recv
send
socket
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ