Static task
static1
Behavioral task
behavioral1
Sample
eef10e8bffde66b64146b18ef42d973e8ff9b3514aaeb7acaf0d63e93fd61a3d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eef10e8bffde66b64146b18ef42d973e8ff9b3514aaeb7acaf0d63e93fd61a3d.exe
Resource
win10v2004-20221111-en
General
-
Target
eef10e8bffde66b64146b18ef42d973e8ff9b3514aaeb7acaf0d63e93fd61a3d
-
Size
244KB
-
MD5
7dec6d3fb9621b93cfbf947366eaa3d2
-
SHA1
98d9eab31fa1061db1c0f9f3b25b9dc0cc0b2403
-
SHA256
eef10e8bffde66b64146b18ef42d973e8ff9b3514aaeb7acaf0d63e93fd61a3d
-
SHA512
e6d52e4e6991c8fc7996fa9978b3ddd7061562da1ec05110366054c54b4c1bf52416c7b851196a60ae78525c433487b72c4974462c44b7e628508c876ddcf2c5
-
SSDEEP
6144:r+3pauMW87dv7EUHOxaBXGh28sOX5udXYSG:r+ZKWm+UBBXG7UtYSG
Malware Config
Signatures
Files
-
eef10e8bffde66b64146b18ef42d973e8ff9b3514aaeb7acaf0d63e93fd61a3d.exe windows x86
23e5ce3b0746e6e4cfe58a4fce95349f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
send
WSACleanup
WSAStartup
listen
kernel32
LockResource
EnumResourceTypesA
SetConsoleCP
CommConfigDialogA
GetStartupInfoA
EnumResourceNamesA
GetModuleHandleA
FindResourceA
ExitProcess
VirtualAlloc
ole32
CoGetCallerTID
CoInvalidateRemoteMachineBindings
CLIPFORMAT_UserFree
BindMoniker
PropVariantChangeType
Sections
CODE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 428KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 701B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ