Static task
static1
Behavioral task
behavioral1
Sample
570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200.exe
Resource
win10v2004-20220722-en
General
-
Target
570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200
-
Size
195KB
-
MD5
5233e8c9eb1f618b7681013005a823b3
-
SHA1
7c2c924d30900cbdff35894b6d9e5da7db0727b2
-
SHA256
570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200
-
SHA512
6b878b6d6635b1b87b3ad63078cb4ec6ed2cb58bdb82a3bc893a8b6919379b2f8d8caa842cc610d1cef246938d390752f9938203b0c739dc51f3515b5a8a80ac
-
SSDEEP
6144:AF29DzDI3knZ1J8ilz9T/xGnihiupPNyt1h:o2pz03yTlz9T/xGnwpPKh
Malware Config
Signatures
Files
-
570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200.exe windows x86
5df70777de50fb15e72ab4100ef94cc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DispatchMessageA
advapi32
RegCloseKey
ole32
CLSIDFromProgID
ws2_32
getpeername
shlwapi
PathFileExistsA
dnsapi
DnsQuery_A
shell32
SHGetSpecialFolderPathA
msvcrt
modf
oleaut32
RegisterTypeLi
Sections
.text Size: 172KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE