Static task
static1
Behavioral task
behavioral1
Sample
0bb2ea7225b3a7243d112bbfe72a3e590cb6fdef747f265136c2c8eaeb8ea79b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bb2ea7225b3a7243d112bbfe72a3e590cb6fdef747f265136c2c8eaeb8ea79b.exe
Resource
win10v2004-20221111-en
General
-
Target
0bb2ea7225b3a7243d112bbfe72a3e590cb6fdef747f265136c2c8eaeb8ea79b
-
Size
135KB
-
MD5
a3360f59797f762dba32485c4ecad4c4
-
SHA1
3e388e1f231e83ef78bc8686411fb678304779e0
-
SHA256
0bb2ea7225b3a7243d112bbfe72a3e590cb6fdef747f265136c2c8eaeb8ea79b
-
SHA512
cdc47b7f8ad27be1020cbbd90b6d31a1b38b822d4df7a987849579f8851eca38f858c09f8e869d8f709d4266e7306e0024afacf2dd147d1b49410d727d6b1972
-
SSDEEP
3072:X7mMFoob9uPtYe3Qv+9S2vYcTYursY92/m3AHZtNpThxpqw63D:BFooob3Qv+IqTYSz92/mAHblqwM
Malware Config
Signatures
Files
-
0bb2ea7225b3a7243d112bbfe72a3e590cb6fdef747f265136c2c8eaeb8ea79b.exe windows x86
70c0bb94159b16e0cfc7c9af1f0f44c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
getsockname
user32
MessageBoxA
dnsapi
DnsFlushResolverCache
shlwapi
PathFileExistsA
shell32
SHGetSpecialFolderPathA
mpr
WNetGetUserA
wininet
InternetSetCookieA
msvcrt
_strnicmp
advapi32
RegOpenKeyA
ole32
OleRun
oleaut32
SafeArrayUnaccessData
Sections
.text Size: 127KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE