Static task
static1
Behavioral task
behavioral1
Sample
66f1e186464f726d57a89f1928598f1a1e387873d7f2e23eb0af0d26af5739bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66f1e186464f726d57a89f1928598f1a1e387873d7f2e23eb0af0d26af5739bb.exe
Resource
win10v2004-20220812-en
General
-
Target
66f1e186464f726d57a89f1928598f1a1e387873d7f2e23eb0af0d26af5739bb
-
Size
112KB
-
MD5
0c999471f1411b70624d8e0c470f41f0
-
SHA1
2f67bc4bb4217fcb816931a74b01b4f3c243c14e
-
SHA256
66f1e186464f726d57a89f1928598f1a1e387873d7f2e23eb0af0d26af5739bb
-
SHA512
1771320163897d53e866d53f38f09858b84c378a692ad6318baeb91783ea93d0bb3c312f8188f84580094f7c528547aa8a66a7a52082e8a3c842e1afc87111b2
-
SSDEEP
3072:qWl1FvLKN8g4XFZidnipMb1kdRhIz3nYP:lZzv9VonWOkdRhEY
Malware Config
Signatures
Files
-
66f1e186464f726d57a89f1928598f1a1e387873d7f2e23eb0af0d26af5739bb.exe windows x86
d43f2bdb945a3a1e9820a9f62a98ca14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcmp
_except_handler3
calloc
free
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
??2@YAPAXI@Z
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memset
_ftol
memmove
_CxxThrowException
__CxxFrameHandler
__getmainargs
??3@YAXPAX@Z
kernel32
GetModuleHandleA
lstrcmpiA
Sleep
LoadLibraryA
GetProcAddress
GetStartupInfoA
ws2_32
select
gethostname
recv
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ