Static task
static1
Behavioral task
behavioral1
Sample
d936cdd3b9a2327b310dab013d92d7aca6abc82471ee2ce3a70ebb13590d3706.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
d936cdd3b9a2327b310dab013d92d7aca6abc82471ee2ce3a70ebb13590d3706.exe
Resource
win10v2004-en-20220112
General
-
Target
d936cdd3b9a2327b310dab013d92d7aca6abc82471ee2ce3a70ebb13590d3706
-
Size
8KB
-
MD5
a49236db790de4a77b6140c8ba215cd8
-
SHA1
a25f31c5a5b3d4bbc5bec188211fc84073955001
-
SHA256
d936cdd3b9a2327b310dab013d92d7aca6abc82471ee2ce3a70ebb13590d3706
-
SHA512
1058ea8bdf358824f478449f8c7171748d26bd1be767308d1d2ec2c6606cad0af8402cab06e700a76401ce9f20ec6517e0e583f35c7187ba35ac62f3990bf156
-
SSDEEP
96:Z0v4mUWKh9ctgC1R77dnnKymV44ShD1wAL5JyctY3LaOxf0:9mUWKs/7tnKfzShD1wx7Lawf0
Malware Config
Signatures
Files
-
d936cdd3b9a2327b310dab013d92d7aca6abc82471ee2ce3a70ebb13590d3706.exe windows x86
cc40fefa3af5cd00cc28dbd874038a4d
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc
wininet
HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile
shell32
ShellExecuteW
ntdll
RtlDecompressBuffer
swprintf
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ