Static task
static1
Behavioral task
behavioral1
Sample
29b2660fceb8bef8874579cb12efd7164df7365138a1f9f41fe3409476b00cc0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29b2660fceb8bef8874579cb12efd7164df7365138a1f9f41fe3409476b00cc0.exe
Resource
win10v2004-20220812-en
General
-
Target
29b2660fceb8bef8874579cb12efd7164df7365138a1f9f41fe3409476b00cc0
-
Size
4KB
-
MD5
3218e720bf81c6d36e434b70022c53ed
-
SHA1
b0d365fe2119e8da67a8343195022b0ceff4d1e6
-
SHA256
29b2660fceb8bef8874579cb12efd7164df7365138a1f9f41fe3409476b00cc0
-
SHA512
1f0fde1f03d5a295690d620c8b789c74af754c034be55707d70c52d973d978f0f7b79a94cdaae6f61c8772fe87ff702cfb69f8a918b6076d7966fbe176f6d02d
Malware Config
Signatures
Files
-
29b2660fceb8bef8874579cb12efd7164df7365138a1f9f41fe3409476b00cc0.exe windows x86
edf0e6bd555b9de8a7178a679873a02f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
Sleep
ExitProcess
WriteFile
lstrcatA
lstrlenA
CreateThread
CloseHandle
CreateFileA
CopyFileA
WinExec
user32
FindWindowA
wininet
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
shell32
ShellExecuteA
wsock32
WSACleanup
WSAStartup
advapi32
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE