Static task
static1
Behavioral task
behavioral1
Sample
2646974ecd2995f6036bfecf2fe12dd953ef6fd1d07b79cd2485ad78bbb1a53a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2646974ecd2995f6036bfecf2fe12dd953ef6fd1d07b79cd2485ad78bbb1a53a.exe
Resource
win10v2004-20220812-en
General
-
Target
2646974ecd2995f6036bfecf2fe12dd953ef6fd1d07b79cd2485ad78bbb1a53a
-
Size
7KB
-
MD5
066a23b79b8e68592c689ecd08c4c5a0
-
SHA1
831a90d4a2cf795a5d0d5845ed8b92c20b29bbea
-
SHA256
2646974ecd2995f6036bfecf2fe12dd953ef6fd1d07b79cd2485ad78bbb1a53a
-
SHA512
d21e722632e7eb3c31a189f960569d66f90d75668a0c07668cd27cb274d3003366e09524a688e47a74a189e125ec11cefe1e26416d0a49c213433cdf21f069fc
-
SSDEEP
192:/W58iveB7gCkyhyf2QXk6Cr4L5rNlN5lLF2Z/MNcFT:DisgwfsOkrNlnlLF2JM
Malware Config
Signatures
Files
-
2646974ecd2995f6036bfecf2fe12dd953ef6fd1d07b79cd2485ad78bbb1a53a.exe windows x86
55259ab7b3e0661cf67de9fd17edee19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
lstrcatA
GetLastError
CopyFileA
DeleteFileA
ExitProcess
HeapReAlloc
lstrcpynA
HeapAlloc
HeapFree
WriteFile
GetProcessHeap
GetVolumeInformationA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
CreateThread
lstrcpyA
GetCommandLineA
GetSystemTimeAsFileTime
lstrlenA
SetFilePointer
GetTickCount
CreateFileA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ShellExecuteA
wininet
HttpQueryInfoA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
DeleteUrlCacheEntry
InternetOpenA
InternetCloseHandle
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ