Static task
static1
Behavioral task
behavioral1
Sample
946e8aa07cf2025adf9ed3f303657439a1668d2c7b7eb952b0ebfc3ae3ffbbd5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
946e8aa07cf2025adf9ed3f303657439a1668d2c7b7eb952b0ebfc3ae3ffbbd5.exe
Resource
win10v2004-20220812-en
General
-
Target
946e8aa07cf2025adf9ed3f303657439a1668d2c7b7eb952b0ebfc3ae3ffbbd5
-
Size
68KB
-
MD5
754e2ba1009d9152ef566e9ffbe3a9bc
-
SHA1
3beeedcfba974c7392782957adb4035a5d3270f0
-
SHA256
946e8aa07cf2025adf9ed3f303657439a1668d2c7b7eb952b0ebfc3ae3ffbbd5
-
SHA512
8c94a2775e60e40232ed1931ef105ede2ec1b4741d492bf5032d996806357cd5dfde422d8bcb9218843e0ebb2cdb6b374609d85de1c1dfdf979aecdf4d9c6d33
-
SSDEEP
1536:8BxWrJsPRQbTloEluB4bb7tCLGAOYDIjBXqvYCuL8MlCVKHEArFPgPiehL:8H/ghbncLGAjDmd8oAKHZxPE9
Malware Config
Signatures
Files
-
946e8aa07cf2025adf9ed3f303657439a1668d2c7b7eb952b0ebfc3ae3ffbbd5.exe windows x86
f0ffb5cacec9a0fcfd5e9fd97bb6e0c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SendMessageTimeoutA
advapi32
RegEnumKeyExA
ole32
CoInitialize
shell32
SHGetSpecialFolderPathA
wininet
InternetOpenUrlA
shlwapi
PathAddBackslashA
urlmon
URLDownloadToCacheFileA
oleaut32
VariantChangeType
iphlpapi
GetNetworkParams
Sections
.text Size: 63KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE