Static task
static1
Behavioral task
behavioral1
Sample
2b45211cd5c739a499371a61097c42c6052e50b0ce94ac801f58fc528b8d2124.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b45211cd5c739a499371a61097c42c6052e50b0ce94ac801f58fc528b8d2124.exe
Resource
win10v2004-20220901-en
General
-
Target
2b45211cd5c739a499371a61097c42c6052e50b0ce94ac801f58fc528b8d2124
-
Size
29KB
-
MD5
947bac935a7f154811689da8875212e1
-
SHA1
cde30fe345e83fab7faea6cbfb4a317c4a9232e3
-
SHA256
2b45211cd5c739a499371a61097c42c6052e50b0ce94ac801f58fc528b8d2124
-
SHA512
6ea9650152e5d5ba0e0c4b9e0f6679cfe33ce34325b80204a2e9b2b2c7a3876bb9312fd1775fb7c3c01dd4e2c42d1c24ec427dff7e228eb1ab7c9aaeadb4d484
-
SSDEEP
192:aeNbmiD6L4KTXUfq8rsV8T5VPCacPiUckhyZw1DYhP1oyn7+5Fo0OQ:xfDqm9F4KPks61DYN1VQlr
Malware Config
Signatures
Files
-
2b45211cd5c739a499371a61097c42c6052e50b0ce94ac801f58fc528b8d2124.exe windows x86
9092e39a93668beb45af87d64fc78087
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_ftol
asin
printf
scanf
strlen
strcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
free
realloc
memset
_except_handler3
memcpy
imagehlp
MakeSureDirectoryPathExists
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
kernel32
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
Sleep
VirtualAlloc
GetProcessHeap
HeapAlloc
WriteFile
CreateFileA
ReadFile
GetFileSize
SetFilePointer
GetModuleHandleA
GetStartupInfoA
CloseHandle
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ