Static task
static1
Behavioral task
behavioral1
Sample
971afcf1e1df9ff89880906b9125a7cf217ebd683a9a9f9c9144bf681cce99fa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
971afcf1e1df9ff89880906b9125a7cf217ebd683a9a9f9c9144bf681cce99fa.exe
Resource
win10v2004-20221111-en
General
-
Target
971afcf1e1df9ff89880906b9125a7cf217ebd683a9a9f9c9144bf681cce99fa
-
Size
5KB
-
MD5
18b33495e9d8d87bfe9af7a789a7f6d4
-
SHA1
25025d398c45b18cd420bef7f03f20536f29ce34
-
SHA256
971afcf1e1df9ff89880906b9125a7cf217ebd683a9a9f9c9144bf681cce99fa
-
SHA512
57faea279cc90ccbc776b2c07accd2e57a6ae3de78bcd44373953d85122f208570139dc7c3c5e4d38ff1ad6fd00f09976800c2820489323411cde2eac7239c4b
-
SSDEEP
96:Q5hjIzIMVYneFgtAhYu7e0YVu67eh5DB:Q06Zae5lehH
Malware Config
Signatures
Files
-
971afcf1e1df9ff89880906b9125a7cf217ebd683a9a9f9c9144bf681cce99fa.exe windows x86
3c7ea1ed822ba6cae2c8e48d745df0f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
GetStdHandle
GetConsoleScreenBufferInfo
wsock32
recv
send
connect
gethostbyname
ioctlsocket
gethostname
socket
closesocket
WSASetLastError
WSAStartup
WSAGetLastError
getservbyname
crtdll
_iob
puts
fputs
strchr
fflush
exit
_amsg_exit
__GetMainArgs
printf
fprintf
user32
CharToOemA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ