Static task
static1
Behavioral task
behavioral1
Sample
83f4b42d6fb549859f69efb2d5d9a00dce346492bc23126ce00ab7b321121a77.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
83f4b42d6fb549859f69efb2d5d9a00dce346492bc23126ce00ab7b321121a77.exe
Resource
win10v2004-20220812-en
General
-
Target
83f4b42d6fb549859f69efb2d5d9a00dce346492bc23126ce00ab7b321121a77
-
Size
132KB
-
MD5
b3340f71bdcbdf0b152ee3916e54089c
-
SHA1
58cc0d2c64d4bbe48d507b34b82d04342894379a
-
SHA256
83f4b42d6fb549859f69efb2d5d9a00dce346492bc23126ce00ab7b321121a77
-
SHA512
eed7b7b69a37f9420136a78d4ab7584d4042fb0cf8a46413712b3cc7db3563428d213acc661ab03dfd8979a0c4024831a11154e1a232b42f6a288a68500921aa
-
SSDEEP
3072:kB+U/pvyvJjtKeXea610syuzf1EN3D2h/Be:kBxyvL6eshzuy/Be
Malware Config
Signatures
Files
-
83f4b42d6fb549859f69efb2d5d9a00dce346492bc23126ce00ab7b321121a77.exe windows x86
2d07b8a4d02d06c6d33e155dde6c1279
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
inet_addr
gethostbyaddr
WSAGetLastError
recv
socket
connect
closesocket
send
kernel32
LoadLibraryA
TerminateThread
GetSystemTime
ExitProcess
lstrlenA
MultiByteToWideChar
Sleep
GetProcAddress
advapi32
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
oleaut32
SysAllocStringLen
SysFreeString
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ