Static task
static1
Behavioral task
behavioral1
Sample
7b51e14ca50b5c0fe26b242c02278635c50cee33442ac3c114b3819484a1ea60.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7b51e14ca50b5c0fe26b242c02278635c50cee33442ac3c114b3819484a1ea60.exe
Resource
win10v2004-20220812-en
General
-
Target
7b51e14ca50b5c0fe26b242c02278635c50cee33442ac3c114b3819484a1ea60
-
Size
20KB
-
MD5
6497dfa5bc9e2137966d44372484b537
-
SHA1
6a6893dfc53bfc17d864e338b2b960f8f8db6bff
-
SHA256
7b51e14ca50b5c0fe26b242c02278635c50cee33442ac3c114b3819484a1ea60
-
SHA512
9e68eb0561f8b0e44e79f5c07fe1cc582023b72d151fc78c778f57f5d2b111efcab94f4402d0398cea58a0d22fc1af02800403d6f894c972856d7b597cadddb3
-
SSDEEP
192:9Va8tcaAWyRxmxLj0B2Gth7gwGC4l9V2H0Hob7X5z5uigiqi:9tOWy/mxLQnh71GnlYwonp1uigin
Malware Config
Signatures
Files
-
7b51e14ca50b5c0fe26b242c02278635c50cee33442ac3c114b3819484a1ea60.exe windows x86
b4f84bd6a1dcf45a2a9a6bfe8b4261c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
GetTickCount
CreateThread
HeapFree
ExitProcess
HeapAlloc
WriteFile
GetSystemDirectoryA
CreateProcessA
GetThreadContext
GetThreadSelectorEntry
ReadProcessMemory
VirtualProtect
WriteProcessMemory
ResumeThread
GetModuleHandleA
CloseHandle
CreateFileA
Sleep
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
lstrcatA
FreeLibrary
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
GetVersion
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
GetModuleFileNameA
ReadFile
lstrcpyA
GetComputerNameA
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
shell32
ShellExecuteA
ws2_32
closesocket
recv
send
ntohl
setsockopt
htons
socket
bind
htonl
WSAStartup
connect
inet_ntoa
user32
wsprintfA
advapi32
ControlService
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
shlwapi
SHSetValueA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE