Static task
static1
Behavioral task
behavioral1
Sample
8ff9f7e00110aed859cf288ebf3a19b9585e4fa9623ada40693a65ff94303189.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ff9f7e00110aed859cf288ebf3a19b9585e4fa9623ada40693a65ff94303189.exe
Resource
win10v2004-20220812-en
General
-
Target
8ff9f7e00110aed859cf288ebf3a19b9585e4fa9623ada40693a65ff94303189
-
Size
4KB
-
MD5
327a22ed705160c321880eb08d7fda56
-
SHA1
bd4d0811be35f2a11a9bb5cc2b751572565ff61a
-
SHA256
8ff9f7e00110aed859cf288ebf3a19b9585e4fa9623ada40693a65ff94303189
-
SHA512
e417499196dfada83fed5845a2d817661b8b66002233b2d0ef92b052d361bf2208d96d526c7d80f30f861c8a23b6b9cf05a18a598c07569b69c9a9fe932bec7e
-
SSDEEP
48:cDRCm7ejnh9HDXkkQbH5pRzd2vlEP3XUYhcAQBvlosx0giA+3Uclj:edqjH4pz9d2vl4UocJfogMJ3llj
Malware Config
Signatures
Files
-
8ff9f7e00110aed859cf288ebf3a19b9585e4fa9623ada40693a65ff94303189.exe windows x86
e50e3e0d720a991e6f5c8b9d6103239e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
DeleteFileA
Sleep
GetTickCount
WinExec
GetTempPathA
GetProcAddress
LoadLibraryA
ExitProcess
GetWindowsDirectoryA
user32
wsprintfA
shlwapi
PathRemoveFileSpecA
msvcr71
??2@YAPAXI@Z
strchr
_itoa
??3@YAXPAX@Z
sprintf
fclose
fscanf
fopen
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
rpcrt4
UuidCreateSequential
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE