Static task
static1
Behavioral task
behavioral1
Sample
a94102290c607cea7c8e2331afefd039ff8427e40ae7aa187b7db33c2454e038.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a94102290c607cea7c8e2331afefd039ff8427e40ae7aa187b7db33c2454e038.exe
Resource
win10v2004-20220812-en
General
-
Target
a94102290c607cea7c8e2331afefd039ff8427e40ae7aa187b7db33c2454e038
-
Size
212KB
-
MD5
381476bf623f1fc9802ef752f39f0690
-
SHA1
6d02e4691d7ac6e3ce8ebb2869ecd1a56496f7aa
-
SHA256
a94102290c607cea7c8e2331afefd039ff8427e40ae7aa187b7db33c2454e038
-
SHA512
6bdae8b83abb531e55869b4f5c18a6b596c6ae1b33effbac7957e8f37dc6055cef85e20915c9b09c70af3d118149c2837c7eec0849399235f8dab23efec47293
-
SSDEEP
768:iJpesKnIysEKmqvnNRoxBaAwl8D7wQuq4IkiKkPxlWBGn9ZtvZqMEeg7iB9KM3Sx:sQuC0AYEaq49woG9pVYSSRroG4VP
Malware Config
Signatures
Files
-
a94102290c607cea7c8e2331afefd039ff8427e40ae7aa187b7db33c2454e038.exe windows x86
984a742ae4ed64c8aefdfb88ede73003
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetTimeFormatA
GetLocalTime
CreateThread
ExpandEnvironmentStringsA
CloseHandle
WriteFile
CreateFileA
CreateMutexA
TerminateThread
GetVersionExA
GlobalMemoryStatus
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetLastError
Sleep
GetSystemDirectoryA
CopyFileA
DeleteFileA
CreateProcessA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ReadFile
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
user32
FindWindowA
SendMessageA
mpr
WNetAddConnection2A
WNetCancelConnection2A
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
shell32
ShellExecuteA
ws2_32
gethostbyaddr
bind
listen
accept
recv
send
inet_ntoa
WSASocketA
setsockopt
htons
htonl
sendto
WSAGetLastError
inet_addr
gethostbyname
WSAStartup
WSACleanup
closesocket
getsockname
select
ioctlsocket
ntohl
WSAAsyncSelect
__WSAFDIsSet
socket
connect
wininet
InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetCloseHandle
Sections
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE