Static task
static1
Behavioral task
behavioral1
Sample
89c160c7f9606c567691bb43fc9650ecfbc37d97f062dd816cc99ab70fadd5ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89c160c7f9606c567691bb43fc9650ecfbc37d97f062dd816cc99ab70fadd5ba.exe
Resource
win10v2004-20221111-en
General
-
Target
89c160c7f9606c567691bb43fc9650ecfbc37d97f062dd816cc99ab70fadd5ba
-
Size
700KB
-
MD5
ff4478cc774a2f4474d0e67a664c666d
-
SHA1
bd43a4f4565616545bf21919aafd35f9425e763b
-
SHA256
89c160c7f9606c567691bb43fc9650ecfbc37d97f062dd816cc99ab70fadd5ba
-
SHA512
02d2ac8083523f1490e27677bf9c3fa353457a74692d65eec840d814bb88cb469647c3ccba102a2bcbc516f4334263a94beb8cbe166b04a6aa55b4c76ab9a866
-
SSDEEP
12288:D+ddO2JdT1iRN75HVnzbMI9n2S3Gy6udc1Ev9OJEnIEFY7KFAyPiczzmAmSGZ6O:S893GyhdcM4+nIEFsK3pzzmzHZR
Malware Config
Signatures
Files
-
89c160c7f9606c567691bb43fc9650ecfbc37d97f062dd816cc99ab70fadd5ba.exe windows x86
f26d302baf77036fa87bd694159eaf2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
getpeername
WSAStartup
getsockopt
closesocket
gethostname
getaddrinfo
freeaddrinfo
ioctlsocket
listen
accept
recvfrom
sendto
send
select
__WSAFDIsSet
WSACleanup
WSAIoctl
connect
WSAGetLastError
htons
ntohs
getsockname
setsockopt
recv
bind
socket
WSASetLastError
wldap32
ord26
ord41
ord127
ord118
ord133
ord142
ord46
ord301
ord27
ord147
ord167
ord208
ord145
ord14
ord216
ord79
kernel32
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetFullPathNameW
GetTimeZoneInformation
RtlUnwind
LoadLibraryExW
ExitThread
GetFileAttributesW
lstrcpynW
CreateDirectoryW
GetTickCount
GetModuleHandleW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetCommandLineW
InitializeCriticalSectionAndSpinCount
RaiseException
GetLastError
DecodePointer
DeleteCriticalSection
VerSetConditionMask
SleepEx
VerifyVersionInfoW
InitializeCriticalSection
LeaveCriticalSection
SetLastError
EnterCriticalSection
Sleep
PeekNamedPipe
FreeLibrary
LoadLibraryW
ReadFile
GetStdHandle
GetProcAddress
GetFileType
FormatMessageA
WaitForSingleObject
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
MoveFileExW
CreateFileW
GetFileSize
SetEndOfFile
SetFilePointer
SetFileTime
WriteFile
GetFileInformationByHandle
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetTempPathW
GetCurrentProcessId
GetCurrentThreadId
FindClose
FindFirstFileW
GetModuleHandleA
VirtualAlloc
VirtualFree
CreateProcessW
GetModuleFileNameW
GetCurrentProcess
QueryDosDeviceW
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
TerminateProcess
Process32NextW
IsDebuggerPresent
OutputDebugStringW
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
GetModuleHandleExW
AreFileApisANSI
IsValidCodePage
GetACP
GetOEMCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
WriteConsoleW
SetEnvironmentVariableA
WaitForMultipleObjects
GetTempFileNameW
SetFilePointerEx
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStringTypeW
EncodePointer
user32
CharUpperW
advapi32
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
shell32
CommandLineToArgvW
SHGetSpecialFolderPathW
SHFileOperationW
oleaut32
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
shlwapi
PathIsDirectoryW
PathAddBackslashW
PathFileExistsW
Sections
.text Size: 286KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 590KB - Virtual size: 589KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ