Static task
static1
Behavioral task
behavioral1
Sample
b0a2795ee5f90de70c86e370488cea7432b76f89f15dbe2686366c5e7d1a02ee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0a2795ee5f90de70c86e370488cea7432b76f89f15dbe2686366c5e7d1a02ee.exe
Resource
win10v2004-20220812-en
General
-
Target
b0a2795ee5f90de70c86e370488cea7432b76f89f15dbe2686366c5e7d1a02ee
-
Size
32KB
-
MD5
404030a95cb7846fe5c8d5c42f068de0
-
SHA1
483eb0779a6a093cde0db02bed9dcbe3dd64ba12
-
SHA256
b0a2795ee5f90de70c86e370488cea7432b76f89f15dbe2686366c5e7d1a02ee
-
SHA512
4444ddb785ca0b936f8b2a249cca0bb99e55ebdc8b260200c3451c52c576b59223df5725fcb72e69863d4aa46c8856d901075c2a3bf028a6eeb1c4d435664fad
-
SSDEEP
384:jYM5463oC3sO5pT2qgiVz1kPX2lk+R6vtTUtZFYM5463ETyuv:jjjoC3se2M2ck+EZsjj
Malware Config
Signatures
Files
-
b0a2795ee5f90de70c86e370488cea7432b76f89f15dbe2686366c5e7d1a02ee.exe windows x86
d6229cb700255de556cd715de242fca9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
ObtainUserAgentString
advapi32
OpenServiceA
OpenProcessToken
CloseServiceHandle
DeleteService
ControlService
OpenSCManagerA
AdjustTokenPrivileges
LookupPrivilegeValueA
wininet
InternetGetConnectedState
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
kernel32
Process32First
ExitProcess
GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
CloseHandle
WriteFile
CreateFileA
Process32Next
GetSystemDefaultLangID
CreateToolhelp32Snapshot
TerminateProcess
GetExitCodeProcess
OpenProcess
Sleep
GetSystemTime
GetWindowsDirectoryA
WinExec
GetLastError
GetCurrentProcess
GetModuleHandleA
msvcrt
_itoa
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE