Static task
static1
Behavioral task
behavioral1
Sample
7386e7d895ee57696284b23def73daef0c2832b4ebf740d76a7ec5c6e8006181.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7386e7d895ee57696284b23def73daef0c2832b4ebf740d76a7ec5c6e8006181.exe
Resource
win10v2004-20221111-en
General
-
Target
7386e7d895ee57696284b23def73daef0c2832b4ebf740d76a7ec5c6e8006181
-
Size
512KB
-
MD5
d0baebbf980cfc2b7687534ded4e267e
-
SHA1
45353cb20cb72a2b44f0983a5ff3f27cf982513a
-
SHA256
7386e7d895ee57696284b23def73daef0c2832b4ebf740d76a7ec5c6e8006181
-
SHA512
749e4863eb4c114951492d8123b37bf781183207ac7592c0dee7ae5d4b9edde67f694347e2721d78cb2976005d5262db2f422bf81f6f18ce68e9353c4122cd0c
-
SSDEEP
6144:/pQWg+DnFXA7bt8S7M+cTcJCTOQJSMP/aszSrhk6qWR7N:/uAObt8S7MFT+6OQRP/aszSrhk/WR
Malware Config
Signatures
Files
-
7386e7d895ee57696284b23def73daef0c2832b4ebf740d76a7ec5c6e8006181.exe windows x86
e00e916b120cee2c8c0d8df0d81eadf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
recv
select
send
WSAGetLastError
shutdown
ioctlsocket
htons
gethostbyname
connect
inet_ntoa
socket
closesocket
WSAStartup
WSACleanup
tapi32
lineGetDevCapsA
lineShutdown
lineInitialize
lineClose
lineGetIDA
lineOpenA
lineNegotiateAPIVersion
kernel32
SetCommState
GetCommState
EscapeCommFunction
PurgeComm
WriteFile
ClearCommError
ReadFile
GetLastError
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
WinExec
SetErrorMode
LocalFree
FormatMessageA
lstrlenA
GetVersionExA
GetFileAttributesA
SetFilePointer
GetFileSize
DeleteFileA
MoveFileA
CopyFileA
FindClose
FindFirstFileA
CreateDirectoryA
LocalAlloc
FindNextFileA
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCurrentDirectoryA
CloseHandle
HeapSize
GetTimeZoneInformation
SetHandleCount
LCMapStringW
LCMapStringA
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStdHandle
ExitProcess
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetProcessHeap
GetCommandLineA
GetFileType
MultiByteToWideChar
GetConsoleMode
Sleep
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSection
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
FlushFileBuffers
CompareStringA
CompareStringW
GetFullPathNameA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetTimeFormatA
GetDateFormatA
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
ExitThread
ResumeThread
CreateThread
WideCharToMultiByte
GetConsoleCP
user32
GetMessageA
TranslateMessage
MoveWindow
SetTimer
KillTimer
BringWindowToTop
GetDlgItem
GetWindowTextA
SetForegroundWindow
SetFocus
GetDlgItemTextA
EndDialog
SetWindowTextA
SetDlgItemTextA
FindWindowA
PeekMessageA
LoadCursorA
LoadBitmapA
DestroyWindow
SetWindowPos
GetDC
SendMessageA
ReleaseDC
GetWindowRect
RegisterClassA
SetWindowLongA
BeginPaint
GetClientRect
GetWindowLongA
EndPaint
DefWindowProcA
InvalidateRect
UpdateWindow
FillRect
wsprintfA
DrawTextA
PostQuitMessage
IsWindow
LoadIconA
CreateWindowExA
ShowWindow
DialogBoxParamA
DispatchMessageA
gdi32
CreateFontA
ExtTextOutA
DeleteObject
CreateCompatibleDC
BitBlt
DeleteDC
CreateSolidBrush
CreatePen
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetTextColor
Polyline
SelectObject
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE