Static task
static1
Behavioral task
behavioral1
Sample
563fd56c335d652979fbee558af2fc9816ec86fd72f36d3db4491e7dbc687179.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
563fd56c335d652979fbee558af2fc9816ec86fd72f36d3db4491e7dbc687179.exe
Resource
win10v2004-20220812-en
General
-
Target
563fd56c335d652979fbee558af2fc9816ec86fd72f36d3db4491e7dbc687179
-
Size
108KB
-
MD5
677b1a72a61349d333d90f430a549e03
-
SHA1
ff229d0ac654410f75ff07d38198e51dad562623
-
SHA256
563fd56c335d652979fbee558af2fc9816ec86fd72f36d3db4491e7dbc687179
-
SHA512
a0a1be9a85ce419690751d183a55ee6e465db6392b74aea33a7fd8a39d736f6545fe83dfd3974a926986673320d64b0d2c86d964c9c978c41149949d89d57bea
-
SSDEEP
1536:W++Zt/Xubcuqr0baKk/mF9JAUwsZTPuhKbWLmnRFRce6VLrSjjw9U:WHZt/XubcAbaKkwaU944WLmnfRn4icU
Malware Config
Signatures
Files
-
563fd56c335d652979fbee558af2fc9816ec86fd72f36d3db4491e7dbc687179.exe windows x86
b4936ad59a50ce716ebe9d0026530f2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
lstrcpyA
lstrcatA
GetSystemDirectoryA
Sleep
ExitThread
TerminateProcess
CreateProcessA
CreateThread
GetProcAddress
LoadLibraryA
WinExec
GetTempPathA
SetFileAttributesA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetLastError
OpenMutexA
WaitForSingleObject
GetLocaleInfoW
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
WriteFile
GetFileType
GetStdHandle
SetHandleCount
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
user32
GetDesktopWindow
wsprintfA
shell32
SHGetSpecialFolderPathA
ws2_32
WSASocketA
WSAStartup
send
setsockopt
sendto
recv
gethostbyname
socket
htons
connect
closesocket
htonl
WSAIoctl
__WSAFDIsSet
select
inet_addr
Sections
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ