Static task
static1
Behavioral task
behavioral1
Sample
998efbdc0e5463bc98958fad78f02bac40b658e6a16e0d5e0e4dcbfb79287020.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
998efbdc0e5463bc98958fad78f02bac40b658e6a16e0d5e0e4dcbfb79287020.exe
Resource
win10v2004-20220812-en
General
-
Target
998efbdc0e5463bc98958fad78f02bac40b658e6a16e0d5e0e4dcbfb79287020
-
Size
24KB
-
MD5
add3ecced90c4249bc1881f697de8a88
-
SHA1
47bc4d5209e26a40cb6c1dd52cf707d347a83091
-
SHA256
998efbdc0e5463bc98958fad78f02bac40b658e6a16e0d5e0e4dcbfb79287020
-
SHA512
5eabcc9e227c1583898d3f531631791195d936fa4e03efcd9bc62d43ec6970f1d474d934bd884ea7b8d88b94f1dbb19f94432d91f106743c3e13e2bd70745a30
-
SSDEEP
192:7wYBcF2GvMTm1W9nxaMonX85CeCzX2sb3jqWtFBpfDnQ:7w0cBanYMonsgzGULpfDQ
Malware Config
Signatures
Files
-
998efbdc0e5463bc98958fad78f02bac40b658e6a16e0d5e0e4dcbfb79287020.exe windows x86
a89cc2d8822154f819ccc5362d375174
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
GetExitCodeThread
SetThreadPriority
GetThreadPriority
Sleep
GetTickCount
CreateThread
GetCurrentThread
ws2_32
gethostbyname
connect
socket
htons
bind
closesocket
listen
accept
WSAStartup
WSACleanup
recv
send
msvcrt
_onexit
__dllonexit
free
??2@YAPAXI@Z
_strdup
rand
strncmp
atoi
_strlwr
strtok
strncpy
sprintf
_vsnprintf
strstr
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE