Static task
static1
Behavioral task
behavioral1
Sample
c7ad231d9ff5416ffc196de1e98457a025f638db5eb003129293ecbab6e099d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7ad231d9ff5416ffc196de1e98457a025f638db5eb003129293ecbab6e099d1.exe
Resource
win10v2004-20221111-en
General
-
Target
c7ad231d9ff5416ffc196de1e98457a025f638db5eb003129293ecbab6e099d1
-
Size
133KB
-
MD5
f03ca30ccd7038730d9a1a92af35788e
-
SHA1
acc8ffb032106c80070ab1d281d914386d1293dc
-
SHA256
c7ad231d9ff5416ffc196de1e98457a025f638db5eb003129293ecbab6e099d1
-
SHA512
d6ca9d4c2f1a8f6aa8cd33ced3bf647b854e0917377c7f5ea5ab25c29767522a403b2b3e2a4c5794b40160bdb3def12eb84518e89ef0f97fcae441090906c7e9
-
SSDEEP
3072:+rCBGslx1X/MvJRNRYnLr56Ga/j0NmdHSE72nQsQ:kCBGst/GbYLr5Za7d3Sny
Malware Config
Signatures
Files
-
c7ad231d9ff5416ffc196de1e98457a025f638db5eb003129293ecbab6e099d1.exe windows x86
7495107738859731145b709348bcb369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
shutdown
connect
send
kernel32
HeapFree
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetSystemTime
GetLastError
ExitProcess
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
GetSystemInfo
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ