Static task
static1
Behavioral task
behavioral1
Sample
d10fecb712dbc5ebc29016a30de58d62c75d47016928bb6da0afee5e644bf51d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d10fecb712dbc5ebc29016a30de58d62c75d47016928bb6da0afee5e644bf51d.exe
Resource
win10v2004-20220812-en
General
-
Target
d10fecb712dbc5ebc29016a30de58d62c75d47016928bb6da0afee5e644bf51d
-
Size
100KB
-
MD5
d0be0ab51946d717a03bc86a26b67c42
-
SHA1
d1cda33dc78670d8ed8f8b994f9af3dd93cdefdb
-
SHA256
d10fecb712dbc5ebc29016a30de58d62c75d47016928bb6da0afee5e644bf51d
-
SHA512
ed75ad2bffd985a1baabefb75b4f0971ebf04552c4c69b48ee9e49b602ca28fb81f657a835c644aabea1c1b216617fda0cfbad2701b7938ddc702734bd3a5a56
-
SSDEEP
1536:sS537Ottj/cT0P/ZazboEQnCYCuETxllNkVrgEe/4PkZ7coSZO:IPByUMYAlHKrgE+4Pe7coSZO
Malware Config
Signatures
Files
-
d10fecb712dbc5ebc29016a30de58d62c75d47016928bb6da0afee5e644bf51d.exe windows x86
778bdb6c902aa2ea9d88440a668b69f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
socket
htons
inet_addr
connect
kernel32
GetModuleHandleA
GetLocaleInfoW
ReadFile
SetStdHandle
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetProcAddress
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
LoadLibraryA
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE