Static task
static1
Behavioral task
behavioral1
Sample
f9b210da11f245c547f65bb21926cbb66d3032eb50e7eff2cb7346ceaff64b34.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9b210da11f245c547f65bb21926cbb66d3032eb50e7eff2cb7346ceaff64b34.exe
Resource
win10v2004-20221111-en
General
-
Target
f9b210da11f245c547f65bb21926cbb66d3032eb50e7eff2cb7346ceaff64b34
-
Size
32KB
-
MD5
f553baaa64e5143854c28d4c271a1138
-
SHA1
1e57221a2dc3ffe390ba23779b1d8758e1c7d4cf
-
SHA256
f9b210da11f245c547f65bb21926cbb66d3032eb50e7eff2cb7346ceaff64b34
-
SHA512
02c17249954309f5b3dab55229fa9209bb74f3dca7d5b0ff8d783ab611c080945bd64d65b594232e945434cc2ce33f16da59ee442d1270e7f065aa615b11ceda
-
SSDEEP
384:WuQxyXOBns2/7PERPiAGwml6vryPstvls9prqCo3p:WuQk2R/74PL1r2GleBqCo
Malware Config
Signatures
Files
-
f9b210da11f245c547f65bb21926cbb66d3032eb50e7eff2cb7346ceaff64b34.exe windows x86
15737720a7ac83b0ca7a359f1ac1a44d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
WSASendTo
WSAGetLastError
closesocket
WSACleanup
recvfrom
WSASocketA
setsockopt
ioctlsocket
bind
gethostname
gethostbyname
htons
kernel32
HeapFree
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
Sleep
SetSystemTime
GetSystemTime
WaitForSingleObject
CreateThread
WideCharToMultiByte
Beep
CreateEventA
CloseHandle
HeapDestroy
GetFileType
HeapCreate
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
UnhandledExceptionFilter
VirtualFree
RtlUnwind
GetModuleFileNameA
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
WriteFile
GetCurrentProcess
user32
DrawTextA
GetClientRect
SetTimer
EndPaint
DefWindowProcA
KillTimer
DestroyWindow
DialogBoxParamA
LoadCursorA
UpdateWindow
LoadIconA
LoadAcceleratorsA
RegisterClassExA
LoadStringA
TranslateMessage
GetMessageA
TranslateAcceleratorA
PostQuitMessage
DispatchMessageA
EndDialog
ShowWindow
CreateWindowExA
BeginPaint
netapi32
NetGetDCName
NetApiBufferFree
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ