Static task
static1
Behavioral task
behavioral1
Sample
antarctica-client.exe
Resource
win10v2004-20230220-en
General
-
Target
antarctica-client.exe
-
Size
4.0MB
-
MD5
b784623b413c6c8706cd27ba07af2fa2
-
SHA1
d53d17420e4f8f7b26876f1395f6fca284e2b84d
-
SHA256
fbcaeb1ba86edfa41988dd42b4959d24570af179ddf94319c2ea22389c1da876
-
SHA512
39fd3ba01f6bc3da318f6bfb0064610c23a617bb49e46fe5b3fc25e8930f97c061fcd4790563993da8ac7127e2f6dadd0495611a300df09ba848f91b07877ee8
-
SSDEEP
98304:y9RDuJp+kdorv/GOOjDK2QlGGQjZhxpjkEf7pO:cRDuJp+kdqnwPKDlQhxiEf
Malware Config
Signatures
Files
-
antarctica-client.exe.exe windows x64
dc12932426806b6b47a373d7ae42c21d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
mscoree
_CorExeMain
Sections
Size: 1.8MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
drkwoqlz Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wfeqymqa Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE