Static task
static1
Behavioral task
behavioral1
Sample
92b4efde10a849b1870d32d2b46c135bc12bd74d67fed50e8bdbe92805e0da8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92b4efde10a849b1870d32d2b46c135bc12bd74d67fed50e8bdbe92805e0da8d.exe
Resource
win10v2004-20220812-en
General
-
Target
92b4efde10a849b1870d32d2b46c135bc12bd74d67fed50e8bdbe92805e0da8d
-
Size
25KB
-
MD5
3842102ce35789ede4fa8a4e18b62265
-
SHA1
01d2df1e51a588512b33ba56f6b09407ef62b343
-
SHA256
92b4efde10a849b1870d32d2b46c135bc12bd74d67fed50e8bdbe92805e0da8d
-
SHA512
38564ea947b25b36cd2b0346f50b4d328542e9ff536a0824dfdeb3afc3256cfef7b69c81173789ec04bec495fba628d61caa864a73edd96e754a2ddf70ac8006
-
SSDEEP
768:rW2GA2a4kvTrHAQFxfftjaLacmkLGKZSh:YA2AvTrHtFxffJaLaSLGCSh
Malware Config
Signatures
Files
-
92b4efde10a849b1870d32d2b46c135bc12bd74d67fed50e8bdbe92805e0da8d.exe windows x86
0ac7de91a2eaf419c7fa5752b6cd5fb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
WinExec
GetTempFileNameA
GetTempPathA
Sleep
GetSystemDirectoryA
CreateFileA
LoadLibraryA
GetPrivateProfileStringA
ExitProcess
WritePrivateProfileStringA
OutputDebugStringA
GetModuleFileNameA
GetWindowsDirectoryA
FreeLibrary
GetLastError
DuplicateHandle
GetCurrentProcess
GetProcAddress
CloseHandle
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
msvcrt
strcpy
strcat
strrchr
strcmp
memset
atoi
strlen
strchr
_except_handler3
_stricmp
_itoa
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
shlwapi
PathAppendA
Sections
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ