Static task
static1
Behavioral task
behavioral1
Sample
5a961f06963d24a32069e62916489dc6091f3f1ca7c7236079de9cbbadd07c7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a961f06963d24a32069e62916489dc6091f3f1ca7c7236079de9cbbadd07c7d.exe
Resource
win10v2004-20220812-en
General
-
Target
5a961f06963d24a32069e62916489dc6091f3f1ca7c7236079de9cbbadd07c7d
-
Size
7KB
-
MD5
20087ac983c046467f3730ca31d3ac57
-
SHA1
be0f8dc8b8d66bf9f97a4dad7d44ad8212a492d0
-
SHA256
5a961f06963d24a32069e62916489dc6091f3f1ca7c7236079de9cbbadd07c7d
-
SHA512
1927ceb3960c22d6322638f5de3e416978cb75e733e393a80faba3a9025a590b5329bb90c8b48667fc8403e292e6bd9bae0ec9dca40d5a5845c9057a1ae8491a
-
SSDEEP
192:uW58HvUB7gCkyhyf2QXk6Cr4L5rNlN5lLF2Z/MNcFT:UP2gwfsOkrNlnlLF2JM
Malware Config
Signatures
Files
-
5a961f06963d24a32069e62916489dc6091f3f1ca7c7236079de9cbbadd07c7d.exe windows x86
55259ab7b3e0661cf67de9fd17edee19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
lstrcatA
GetLastError
CopyFileA
DeleteFileA
ExitProcess
HeapReAlloc
lstrcpynA
HeapAlloc
HeapFree
WriteFile
GetProcessHeap
GetVolumeInformationA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
CreateThread
lstrcpyA
GetCommandLineA
GetSystemTimeAsFileTime
lstrlenA
SetFilePointer
GetTickCount
CreateFileA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ShellExecuteA
wininet
HttpQueryInfoA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
DeleteUrlCacheEntry
InternetOpenA
InternetCloseHandle
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ