Static task
static1
Behavioral task
behavioral1
Sample
a0013a96f97a16dbe1d513dc01bf578b672b774422ce23cd1e8397b2d98668ef.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0013a96f97a16dbe1d513dc01bf578b672b774422ce23cd1e8397b2d98668ef.exe
Resource
win10v2004-20221111-en
General
-
Target
a0013a96f97a16dbe1d513dc01bf578b672b774422ce23cd1e8397b2d98668ef
-
Size
12KB
-
MD5
dfc6d32464fd633628fabcae770bdd42
-
SHA1
d9f2060eb988b76c3ade2c054e0ff8f3d9a689fb
-
SHA256
a0013a96f97a16dbe1d513dc01bf578b672b774422ce23cd1e8397b2d98668ef
-
SHA512
035ca342bae77040519a55acc2a29f337983c6890e13ef68727076023e008d3adeeac97764457f7d9cf888df6090e9f018d6233fd4305967c0f8c988c6802bd2
-
SSDEEP
192:ygN2DFj6oNHqyMynzqWs4REiuIsbqODAk15mM:ygN2hj6o0pyn9sbCk1c
Malware Config
Signatures
Files
-
a0013a96f97a16dbe1d513dc01bf578b672b774422ce23cd1e8397b2d98668ef.exe windows x86
6a47a0a249a90e00fa663a440b4341ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
WSACleanup
bind
WSAGetLastError
listen
accept
getpeername
gethostname
__WSAFDIsSet
ioctlsocket
recv
select
shutdown
send
socket
setsockopt
connect
closesocket
inet_addr
gethostbyname
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
kernel32
GetFileSize
ReadFile
DeleteFileA
FindNextFileA
FindClose
InitializeCriticalSection
EnterCriticalSection
FindFirstFileA
CreateProcessA
GetVersionExA
CreateFileA
WriteFile
Sleep
GetTempPathA
GetTempFileNameA
CreateThread
CreateDirectoryA
LeaveCriticalSection
CloseHandle
user32
wsprintfA
Sections
.avx���� Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE