Static task
static1
Behavioral task
behavioral1
Sample
b218513df15724b38ded71d19a51e43f657512b6e960abc093fad4f028a8ae5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b218513df15724b38ded71d19a51e43f657512b6e960abc093fad4f028a8ae5c.exe
Resource
win10v2004-20220812-en
General
-
Target
b218513df15724b38ded71d19a51e43f657512b6e960abc093fad4f028a8ae5c
-
Size
205KB
-
MD5
857c66a8c57f4f160f83da8a08809531
-
SHA1
3321b31c97f63da5a004cb566d654ccfa4fa5b08
-
SHA256
b218513df15724b38ded71d19a51e43f657512b6e960abc093fad4f028a8ae5c
-
SHA512
f6fec9e8880102aac18564d3137b7bb34da6cf7715f237739011a34962c655ef64d2847185f9edf2a802a2cf9f833b59f8f3593d2965edd4f839f79ad9ec1195
-
SSDEEP
3072:jlYKvotj2t6M/cL5LlCImS4dXVn5cilIy6fg8z2sgQ2ScTJUjTwRikEwYiUHW:jyaEj2d/cL58IJ+TZmfgi8UnwEkETHW
Malware Config
Signatures
Files
-
b218513df15724b38ded71d19a51e43f657512b6e960abc093fad4f028a8ae5c.exe windows x86
d6824fa158c389ddd76f7eb0d82772db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAGetLastError
recv
listen
comctl32
ord14
kernel32
LCMapStringA
LCMapStringW
SetStdHandle
HeapReAlloc
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetSystemTime
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
RaiseException
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
RtlUnwind
HeapAlloc
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
FlushFileBuffers
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetProcessHeap
CloseHandle
FreeLibrary
VirtualQuery
InterlockedExchange
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
VirtualProtect
GetSystemInfo
GetLocaleInfoA
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ