Static task
static1
Behavioral task
behavioral1
Sample
96815cc765924532bdbda35d3631802476033dc459e1c65f32854760c328aa56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96815cc765924532bdbda35d3631802476033dc459e1c65f32854760c328aa56.exe
Resource
win10v2004-20220812-en
General
-
Target
96815cc765924532bdbda35d3631802476033dc459e1c65f32854760c328aa56
-
Size
75KB
-
MD5
105cce1d56963f1519bf020d85d6e739
-
SHA1
5a2ddb40ce10c0c94390c345e574b67b8b50df0a
-
SHA256
96815cc765924532bdbda35d3631802476033dc459e1c65f32854760c328aa56
-
SHA512
864e4a265a74fe99d6a7166915b6e5087234845f4ac3c58b1d3c2e515e5a2258d99f11aa72f1766e43292330c8f219c4bcea342d80478ccaff3a5bd0c36dc730
-
SSDEEP
768:epoPez6BlvPZFYsJ9rUUUZvvvvvvvvvvvvvvvS22222L666jJ90BByfnq4GAMr1/:epo2eBlHHnD22222GJ2s0AUsjertoU
Malware Config
Signatures
Files
-
96815cc765924532bdbda35d3631802476033dc459e1c65f32854760c328aa56.exe windows x86
9335917dd70aa2ca2e9c1e79c99fb096
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationW
SetErrorMode
CloseHandle
GetModuleHandleA
GetProcAddress
HeapReAlloc
GetProcessHeap
HeapAlloc
GetCommandLineA
ExitProcess
GetStartupInfoA
advapi32
CryptAcquireContextA
ws2_32
bind
gethostbyname
getpeername
Sections
RbKKxxYh Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ChfNBWMD Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hkzVWfpk Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OqKpNfrf Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 382B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ