Static task
static1
Behavioral task
behavioral1
Sample
229cb29d37438e333e9d8b2476596aa0c14a259984bd25d49aca1c4444b1b676.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
229cb29d37438e333e9d8b2476596aa0c14a259984bd25d49aca1c4444b1b676.exe
Resource
win10v2004-20221111-en
General
-
Target
229cb29d37438e333e9d8b2476596aa0c14a259984bd25d49aca1c4444b1b676
-
Size
60KB
-
MD5
7ee1a2823c86a3f69b2181a7183661da
-
SHA1
cc435c6483ce510dee3bf7e9b603ce7d16ccfa6d
-
SHA256
229cb29d37438e333e9d8b2476596aa0c14a259984bd25d49aca1c4444b1b676
-
SHA512
cec5c5ecbb979a619d9654b5b0d4019908f1e8841ca4631256d968a4ac9402d18f159a0a4121f548f69cb4f55332f30754ccf8ffb1c1b8a4823fc71b606e009f
-
SSDEEP
768:/pEMOetkn/j1oDHWARJDcmZwjvf4xiUb/GX0bctHS:/pRODnhoD2ARovftUCRtHS
Malware Config
Signatures
Files
-
229cb29d37438e333e9d8b2476596aa0c14a259984bd25d49aca1c4444b1b676.exe windows x86
08bd45832cc97c413f84ae0d56e1c771
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imagehlp
MakeSureDirectoryPathExists
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
kernel32
GetVersionExA
CloseHandle
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
WriteFile
GetFileSize
Sleep
HeapReAlloc
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetLastError
SetConsoleCtrlHandler
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ