Static task
static1
Behavioral task
behavioral1
Sample
0234d60c64ae1185d0324b7802f1d566729471322142530b89936947001e9fa0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0234d60c64ae1185d0324b7802f1d566729471322142530b89936947001e9fa0.exe
Resource
win10v2004-20220812-en
General
-
Target
0234d60c64ae1185d0324b7802f1d566729471322142530b89936947001e9fa0
-
Size
9KB
-
MD5
c1eded124c9888fb10aad786ba046094
-
SHA1
7ea8a1eb1de7bebc24682c0a0eb7effaa1720679
-
SHA256
0234d60c64ae1185d0324b7802f1d566729471322142530b89936947001e9fa0
-
SHA512
4a38ccd281ddafa86c797d65af8560094bb0ddbc52a29bfffe6f3186d1ffc8e4023166f7c6df6ecfa9bb08c7afc53f1a33fa7ad596a1f5de83674ee8d5fb1ae2
-
SSDEEP
192:92cMp3ZWBAxjbABcwCtF1v2f2dBPYFnP1oynwr7K:91KWGFABcwCtXvRYFP1uK
Malware Config
Signatures
Files
-
0234d60c64ae1185d0324b7802f1d566729471322142530b89936947001e9fa0.exe windows x86
bc66d008d4478c4ad3451cc1b6469b5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
GetTempPathA
GetModuleHandleA
GetStartupInfoA
CreateProcessA
GetModuleFileNameA
lstrlenA
OpenProcess
user32
LoadStringA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
ws2_32
gethostname
WSAStartup
wininet
HttpQueryInfoA
InternetOpenUrlA
InternetGetConnectedState
InternetCloseHandle
InternetOpenA
InternetReadFile
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
fwrite
fread
fclose
ftell
fseek
??3@YAXPAX@Z
printf
fopen
__setusermatherr
fflush
sprintf
atoi
strchr
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
winmm
timeGetTime
psapi
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ