Static task
static1
Behavioral task
behavioral1
Sample
bd986752a3f853cf7edb05fc91974fec983c875ec6387568fccad9714b7122f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd986752a3f853cf7edb05fc91974fec983c875ec6387568fccad9714b7122f8.exe
Resource
win10v2004-20220812-en
General
-
Target
bd986752a3f853cf7edb05fc91974fec983c875ec6387568fccad9714b7122f8
-
Size
12KB
-
MD5
24471d9d312451608d68b7d2542066e5
-
SHA1
0dae1a6f42f6f3fa95ee3f4855b4d10f772c28cc
-
SHA256
bd986752a3f853cf7edb05fc91974fec983c875ec6387568fccad9714b7122f8
-
SHA512
732b54b4ca222b03ec0a184a3e9f01847d719c9c14bb6c30de3206b0ef8fd42a8ce058b89ca64e7ddfb79e38e9f8face4a4e522234ef09c64c3ecc130dd33470
-
SSDEEP
192:ryjSigvny03bMWNwFZji7qKR2yh+AHd96oxzqf41zgM9HJNP1oy2ElOmcmCmBxbQ:ryjSigJ3ZwbyVRJHnxu6J9b18ElOmcgk
Malware Config
Signatures
Files
-
bd986752a3f853cf7edb05fc91974fec983c875ec6387568fccad9714b7122f8.exe windows x86
29025920fae6ddee9796b7e2ad90d980
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
inet_addr
gethostbyname
recv
select
send
WSAStartup
connect
socket
WSACleanup
htons
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
RegDeleteKeyA
msvcrt
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strcmpi
strrchr
fopen
fclose
rand
malloc
sprintf
strcat
strcpy
srand
strstr
strtok
atoi
strchr
strncmp
memmove
strncpy
_snprintf
strcmp
memset
strlen
fwrite
kernel32
GetLogicalDriveStringsA
GetDriveTypeA
CreateDirectoryA
lstrcpynA
WriteFile
DeleteFileA
lstrlenA
GetTempPathA
ExitProcess
GetStartupInfoA
CreateFileA
CreateThread
WaitForSingleObject
CloseHandle
GetLocaleInfoA
GetVersionExA
SetErrorMode
OpenMutexA
GetModuleHandleA
GetModuleFileNameA
SetFileAttributesA
CopyFileA
GetLastError
ExitThread
CreateMutexA
GetTickCount
CreateProcessA
ReleaseMutex
Sleep
user32
CharLowerA
FindWindowA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE