Static task
static1
Behavioral task
behavioral1
Sample
79a4cc6b17c6ecd6b64a477dc1b11cedae2784a2c89c763ec29838a164860b0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79a4cc6b17c6ecd6b64a477dc1b11cedae2784a2c89c763ec29838a164860b0a.exe
Resource
win10v2004-20220901-en
General
-
Target
79a4cc6b17c6ecd6b64a477dc1b11cedae2784a2c89c763ec29838a164860b0a
-
Size
131KB
-
MD5
0d45846a3a12d423b08d5f085e8ecf13
-
SHA1
ab5799dbe700f0a8852d110618894ce4c3a1da26
-
SHA256
79a4cc6b17c6ecd6b64a477dc1b11cedae2784a2c89c763ec29838a164860b0a
-
SHA512
4fe8129e7bd66444c57885e393c9f50fd073aadf7dfb69f5112467c8804dbd59be2b706a687f9f514706fdb4041efe997ce3a2e3e3cf4fb2e593f0b866db3411
-
SSDEEP
3072:8aaqBc00WYWpe95N5XTJbuKNJPw6TJUFJ5hW:KqBc0T0lyKN5zlUFJS
Malware Config
Signatures
Files
-
79a4cc6b17c6ecd6b64a477dc1b11cedae2784a2c89c763ec29838a164860b0a.exe windows x86
d7d677376ef43471714277b055d53a2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
IsValidURL
RevokeFormatEnumerator
SetSoftwareUpdateAdvertisementState
URLOpenBlockingStreamW
WriteHitLogging
msvcrt
_clearfp
_close
_commit
_commode
_control87
_copysign
kernel32
CreateMutexA
CreateNamedPipeA
CreatePipe
CreateProcessA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE