Static task
static1
Behavioral task
behavioral1
Sample
02296cef9990ea2e41c0da0367be3a4f2319f9e17069aaa04530ca577ecb6165.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02296cef9990ea2e41c0da0367be3a4f2319f9e17069aaa04530ca577ecb6165.exe
Resource
win10v2004-20220812-en
General
-
Target
02296cef9990ea2e41c0da0367be3a4f2319f9e17069aaa04530ca577ecb6165
-
Size
12KB
-
MD5
4f2c25072564ec19b4426b41c1c74b8a
-
SHA1
d498d6e01604a41cabcc40ae81571ac9e6bc3d37
-
SHA256
02296cef9990ea2e41c0da0367be3a4f2319f9e17069aaa04530ca577ecb6165
-
SHA512
ac440bb5813b2c04a92f50d7f16684e026140cb41a5dd794f7b9892b2e2d78bb04e2938c3fc9aca5dc87a9dc68c2c28c7ffca6c43068bc327bd8262a1f211292
-
SSDEEP
192:msLwRIZsAqSXC8ighBUawRSbP7gUx30WjoN4aDdmPvvAbRQhbjpBnMbDAVlDRh:ms0O7qSXyJg6g24aDdYv4S
Malware Config
Signatures
Files
-
02296cef9990ea2e41c0da0367be3a4f2319f9e17069aaa04530ca577ecb6165.exe windows x86
078d76a4fbe16f81a203bc0ac8abd1ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
CloseHandle
GetFileSize
WriteFile
CreateFileA
DeleteFileA
FreeLibrary
GetLastError
lstrcatA
WaitForSingleObject
CreateThread
CreateMutexA
GetVersionExA
lstrcmpiA
SetFileAttributesA
WinExec
GetTickCount
ReadFile
SetFilePointer
CopyFileA
LoadLibraryA
GetProcAddress
GetCurrentProcess
Sleep
OutputDebugStringA
user32
GetWindowLongA
FindWindowA
wsprintfA
ShowWindow
advapi32
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyA
AdjustTokenPrivileges
wininet
DeleteUrlCacheEntry
msvcp60
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
shell32
ShellExecuteA
msvcrt
_itoa
__CxxFrameHandler
atoi
fread
fclose
fwrite
_except_handler3
__dllonexit
_onexit
fopen
time
localtime
strlen
memcpy
memset
malloc
strchr
strcpy
sprintf
strcat
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE