Static task
static1
Behavioral task
behavioral1
Sample
2ff70e75f4cd3d879b2157d387a81f804cf4b61aeaa2933323e3366aeffd8c8d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2ff70e75f4cd3d879b2157d387a81f804cf4b61aeaa2933323e3366aeffd8c8d.exe
Resource
win10v2004-20220812-en
General
-
Target
2ff70e75f4cd3d879b2157d387a81f804cf4b61aeaa2933323e3366aeffd8c8d
-
Size
138KB
-
MD5
d051762605976cb70fb73408f126f67c
-
SHA1
fefc5748eacbe0816dfa0954e8e0ec300f9c08fb
-
SHA256
2ff70e75f4cd3d879b2157d387a81f804cf4b61aeaa2933323e3366aeffd8c8d
-
SHA512
4dbde0e53c4ffa716db5979e67a36394b7eac3305e197c9656e52ad1a3e20d73ef31de61359580332964402b1f066fc39811e59932569387c9680c1093081e20
-
SSDEEP
3072:/CGVdLPq93Y8MPp8VNRq3mHeX61PTIJfGoHdVRwGXTD:6ftYNPARamHW6IfrdQGj
Malware Config
Signatures
Files
-
2ff70e75f4cd3d879b2157d387a81f804cf4b61aeaa2933323e3366aeffd8c8d.exe windows x86
819ddae8f3cdfa4db5da40378907ac1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
ntohs
user32
PeekMessageA
dnsapi
DnsFlushResolverCache
shlwapi
PathFileExistsA
shell32
SHGetSpecialFolderPathA
mpr
WNetGetUserA
wininet
InternetOpenA
msvcrt
strtod
advapi32
RegSetValueExA
ole32
CLSIDFromString
oleaut32
SafeArrayDestroy
Sections
.text Size: 128KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE