Static task
static1
Behavioral task
behavioral1
Sample
c7f29557ca55688d5fb67c8701cf7fdc2ef8ecc2cfce6031cded404d94080d44.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7f29557ca55688d5fb67c8701cf7fdc2ef8ecc2cfce6031cded404d94080d44.exe
Resource
win10v2004-20221111-en
General
-
Target
c7f29557ca55688d5fb67c8701cf7fdc2ef8ecc2cfce6031cded404d94080d44
-
Size
959KB
-
MD5
60ac4970e16b366eef3cf545acd03b32
-
SHA1
d5a1ae12ffdb1b16e5c94c5ed7a7164862872f85
-
SHA256
c7f29557ca55688d5fb67c8701cf7fdc2ef8ecc2cfce6031cded404d94080d44
-
SHA512
95f33b37d63f1515723d4b9885c035979a889af963869ee7bc8017aee98aaf239f583e1aa54fda901402e0f62d39a31fa7b5cca6d737861f616a972c70fcf03b
-
SSDEEP
24576:qbQmGll6xQeBUPz4Ucv9nzy14+QbvccgPMgHQp:sQbBeHUizy14ZboK
Malware Config
Signatures
Files
-
c7f29557ca55688d5fb67c8701cf7fdc2ef8ecc2cfce6031cded404d94080d44.exe windows x86
6059ca33c6fdf202ea172496a6175b88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
getpeername
WSAStartup
getsockopt
closesocket
gethostname
getaddrinfo
freeaddrinfo
ioctlsocket
listen
accept
recvfrom
sendto
send
select
__WSAFDIsSet
WSACleanup
WSAIoctl
connect
WSAGetLastError
htons
ntohs
getsockname
setsockopt
recv
bind
socket
WSASetLastError
wldap32
ord26
ord41
ord127
ord118
ord133
ord142
ord46
ord301
ord27
ord147
ord167
ord208
ord145
ord14
ord216
ord79
kernel32
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetFullPathNameW
GetTimeZoneInformation
RtlUnwind
LoadLibraryExW
ExitThread
GetFileAttributesW
lstrcpynW
CreateDirectoryW
GetTickCount
GetModuleHandleW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetCommandLineW
InitializeCriticalSectionAndSpinCount
RaiseException
GetLastError
DecodePointer
DeleteCriticalSection
VerSetConditionMask
SleepEx
VerifyVersionInfoW
InitializeCriticalSection
LeaveCriticalSection
SetLastError
EnterCriticalSection
Sleep
PeekNamedPipe
FreeLibrary
LoadLibraryW
ReadFile
GetStdHandle
GetProcAddress
WaitForMultipleObjects
FormatMessageA
WaitForSingleObject
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
MoveFileExW
CreateFileW
GetFileSize
SetEndOfFile
SetFilePointer
SetFileTime
WriteFile
GetFileInformationByHandle
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetTempPathW
GetCurrentProcessId
GetCurrentThreadId
FindClose
FindFirstFileW
GetModuleHandleA
VirtualAlloc
VirtualFree
CreateProcessW
GetModuleFileNameW
GetCurrentProcess
QueryDosDeviceW
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
TerminateProcess
Process32NextW
IsDebuggerPresent
OutputDebugStringW
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
GetModuleHandleExW
AreFileApisANSI
IsValidCodePage
GetACP
GetOEMCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
WriteConsoleW
SetEnvironmentVariableA
GetFileType
GetTempFileNameW
SetFilePointerEx
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStringTypeW
EncodePointer
user32
CharUpperW
advapi32
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
SHFileOperationW
oleaut32
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
shlwapi
PathIsDirectoryW
PathAddBackslashW
PathFileExistsW
Sections
.text Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ